Certificates and keys

JWT viewer

To open a JWT file, drop it in the box below. It opens straight away, even with no extension or the wrong one. Your browser opens it on your device: nothing is uploaded.

Opened on this device, never uploadedDrop or paste another file at any time

What you see

JWT in the viewer
ReadA token on its own, or after Bearer
Datesexp, iat, nbf and auth_time as dates in UTC
SignatureNot checked
Encrypted tokensJWE: the header only
Extensions.jwt
UploadNone: opened on your device

What is a JWT file?

In short

A JWT (JSON Web Token) is a signed token web apps use for sign-ins and API access: a header, a set of claims and a signature, each base64url encoded.

The header and the claims decoded as a tree, the issuer, subject and audience, and the dates (expires, issued at, not before) with whether the token has expired. The signature is not checked: that needs the issuer’s key.

How to open a JWT file

  1. Add your JWT. Drop the file in the box, choose it or paste it.
  2. Look at it. The header and the claims decoded as a tree, the issuer, subject and audience, and the dates (expires, issued at, not before) with whether the token has expired. The signature is not checked: that needs the issuer’s key.
  3. Take it further. Download any file from inside an archive, or open another file.

Questions

Save it in a .jwt or .txt file and drop it here: the header and claims open as a tree, with the dates written out.

No. It is decoded in your browser.

No. The viewer runs in your browser and opens the file on your device. Nothing is sent anywhere.

Related