Paste a token.

Your token stays in your browser.

Here's a preview.

Encoded token

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkw...

This token is

not expired.

iss

Issued by sample.com

aud

For the-api Audience

sub

Subject 1234567890

Token lifetime

Issued Aug 20, 2026 12:00 PM

Now Aug 20, 2026 2:34 PM

Expires Aug 21, 2026 12:00 PM

H Header Token type and signing algorithm

Header

The header describes the token's type and the algorithm specified for its signature.

{
  "alg": "HS256",
  "typ": "JWT"
}

P Payload Claims about the subject and token timestamps

Payload

The payload contains claims about the subject, including when the token was issued and when it expires.

{
  "sub": "1234567890",
  "name": "Kim",
  "iss": "example.com",
  "aud": "my-api",
  "iat": 1787241600,
  "exp": 1787328000
}

S Signature Signature data (not verified by this tool)

Signature

Signature present, not verified. Token Peek displays the encoded signature, but does not check whether it matches the token's contents or was created using a trusted key.

K4Q9nJ7xP2fR6m1vZ3tY8pI
iwiaXNzIjoiYXU0aC5leGFt
cGxlLmNvbSIsInN1YiI6

Common claims

iss Issuer sub Subject aud Audience exp Expiration iat Issued at nbf Not before

TokenPeek decodes JWTs locally in your browser.
It does not verify signatures or confirm that a token is authentic.
Expiration information is based on the decoded claims.