Decode a JSON Web Token locally, no upload.
在浏览器本地解码 JSON Web Token 的 Header 与 Payload,不发送令牌、不验证签名。
A JWT decoder splits a JSON Web Token into its three parts — header, payload and signature — and shows the header and payload as readable JSON. It reveals the algorithm, issuer, expiry and custom claims, which makes it the fastest way to debug authentication. Decoding happens entirely locally, so tokens containing real session data never leave your browser.
JWT 解码器把 JSON Web Token 拆成三部分——头部、载荷、签名——并把头部和载荷显示为可读 JSON。它能揭示算法、签发者、过期时间和自定义声明,是调试认证问题最快的方式。解码完全在本地进行,含真实会话数据的令牌不会离开浏览器。
No. Verifying a signature requires the secret or public key, and sending a token to a third-party service to verify it would defeat the purpose. This tool only decodes so you can inspect the contents.
不能。验证签名需要密钥或公钥,而把令牌发给第三方服务去验证本身就违背了安全目的。本工具只解码,供你检查内容。
Yes, in terms of privacy — decoding runs entirely in your browser and nothing is transmitted. Still, treat any token as a secret and avoid pasting them into tools on shared screens.
隐私角度是安全的——解码完全在浏览器内完成,不传输。但仍应把令牌当机密处理,避免在共享屏幕上操作。
Those are standard registered claims. exp is the expiry time, iat is the issued-at time, both expressed as Unix timestamps in seconds.
它们是标准注册声明。exp 是过期时间,iat 是签发时间,均以秒为单位的 Unix 时间戳。
A JWT must have exactly three segments separated by dots. If the string was truncated or line-wrapped when copied, the decode will fail.
JWT 必须恰好三段、由点分隔。如果复制时被截断或换行,解码就会失败。
Format, validate and minify JSON — Chinese-safe, runs in your br…
格式化、校验并压缩 JSON,支持中文与错误定位。全程在浏览器本地完成。…
Encode or decode Base64 text with UTF-8 and URL-safe support.…
对文本进行 Base64 编码或解码,支持 UTF-8 中文与 URL 安全字符…
Percent-encode or decode URLs, params and text.…
对网址、参数或文本进行 URL 百分号编码与解码,方便调试接口与链接。…
Generate MD5, SHA-1, SHA-256 or SHA-512 hashes.…
用 MD5、SHA-1、SHA-256 或 SHA-512 为文本生成哈希值,常…
Generate random UUID v4 identifiers.…
一键生成多个随机 UUID v4,用于主键、追踪 ID 与测试数据。…
Test regular expressions and see matches live.…
实时测试正则表达式,查看匹配数量与命中内容,方便调试抓取与替换规则。…