Is this tool private?

Yes. All processing happens locally in your browser. No data is uploaded.

What extras does this tool have?

Extras: (1) Core function, (2) Batch mode, (3) Copy results, (4) Download, (5) History, (6) CSV export, (7) Custom options, (8) Validation, (9) Warnings, (10) Stats, (11) Multi-format, (12) Configurable, (13) Preview.

Network, Runs in your browser

JWT Claim Extractor

Extract and decode JWT claims (payload) without verification. 100% private. 100% private.

100% Private Works Offline Instant

JWT token

Signature is NOT verified — only decoded.

Algorithm

HS256

Status

active

Issued at

2018-01-18T01:30:22.000Z

Expires

—

Security warnings

infoHMAC algorithm — verify the shared secret is strong and rotated.
warningToken has no `exp` claim — it never expires.

Header

{
  "alg": "HS256"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022
}

Registered claims

sub1234567890
iat1516239022 (2018-01-18T01:30:22.000Z)

Custom claims

nameJohn Doe

Batch mode (one JWT per line)

Registered claim reference

issIssuer. Principal that issued the JWT.
subSubject. Principal that is the subject of the JWT.
audAudience. Intended recipient(s) of the JWT.
expExpiration. Expiration time (seconds since epoch).
nbfNot Before. Time before which JWT must not be accepted.
iatIssued At. Time the JWT was issued.
jtiJWT ID. Unique identifier for the JWT.

Privacy: all decoding runs locally in your browser.

Extract and decode JWT claims (payload) without verification. 100% private. 100% private. Everything runs locally in your browser — your data never leaves your device.

How to use

Enter your input in the tool above.
Adjust any options to your preference.
Use the Copy or Download buttons to save the result.
Everything happens locally — your data never leaves your browser.

All tools