JWT & API Token Inspector

100% Client-Side Decoded

Decode JSON Web Tokens, inspect RFC 7519 claims, monitor live expiration countdowns, and verify HMAC signatures locally in your browser memory.

Sample Presets:

Raw Encoded Token

Header.Payload.Signature

571 chars

HMAC Signature Verification

HS256

Test your secret key against the token's cryptographic signature locally using browser Web Crypto.

Enter HMAC secret key to verify signature.

Token Expiration Telemetry

Active

Live Status:Expires in 55m 0s

Issued At (iat)

Nov 13, 2026, 14:06:23

5m 0s ago

Expires At (exp)

Nov 13, 2026, 15:06:23

3300s left

Valid From (nbf)

Immediate

Valid now

Permissions, Roles & Scopes

role: authenticated

{
  "iss": "https://xzyabc.supabase.co/auth/v1",
  "sub": "8f1a23b4-5678-4901-b234-567890abcdef",
  "aud": "authenticated",
  "role": "authenticated",
  "email": "polma.tambunan@fintech.id",
  "app_metadata": {
    "provider": "google",
    "providers": [
      "google"
    ]
  },
  "user_metadata": {
    "name": "Polma Tambunan",
    "avatar_url": "https://avatars.githubusercontent.com/u/10001"
  },
  "iat": 1794578783,
  "exp": 1794582383
}

Back to UtilitiesBack