JWT Parser

Decode a JSON Web Token — header, payload, and signature — and surface security notes (alg=none, expired, weak HMAC reminders).

Paste a token above to see the decoded header, payload, and signature.