본문으로 건너뛰기
Tools Star Hub
개발자 도구 카테고리

JWT 디코더

JSON Web Token의 헤더와 페이로드를 브라우저에서 디코딩합니다. 서명은 검증하지 않습니다.

도구를 불러오는 중…

이 도구는 브라우저에서 실행됩니다. 입력값, 파일, 생성된 값은 이 기기에 남습니다. 즐겨찾기와 최근 사용한 도구를 이용하더라도 로컬 저장소에는 도구 이름만 저장되며, 비밀번호나 문서, QR 내용은 절대 저장되지 않습니다. 자세한 내용은 개인정보처리방침을 확인하세요.

이 도구의 자세한 안내(사용법, 예시, 자주 묻는 질문)는 현재 영어로만 제공됩니다.

What this tool does

Read the header and payload of one compact JSON Web Token. The signature is not checked.

How to use

  1. Paste a compact token with sections separated by dots.
  2. Press Decode.

Examples

  • A three-part token

    The first part is the header, the second is the payload, and the third is an unchecked signature section.

Main features

  • Decoded header JSON.
  • Decoded payload JSON.
  • A note that says whether a signature section is present.

How it works

The page splits the token on dots and decodes the header and payload from base64url as UTF-8 JSON. A signature section can be reported as present or empty. It is never described as valid or invalid, because this page does not verify it.

Tips

  • Paste the token only in this page.
  • Treat a decoded payload as untrusted until a verifier checks the signature.

Limitations

Decoding does not prove that a token is authentic. The page does not fetch a signing key.

See the disclaimer for what these tools do not cover.

FAQ

What does a JWT decoder show?
It shows the header JSON and the payload JSON. It also says whether a signature section is present.
Does decoding prove the token is authentic?
No. Decoding a JWT does not verify its signature or prove that the token is authentic.
Is the token sent to a server?
No. Decoding happens in your browser. The token is not saved or added to the page address.
What if the signature section is empty?
The page says the section is present and empty. It still does not call the token valid or invalid.
What if a section is not JSON?
The page rejects that token instead of showing a partial guess.

관련 도구