jwt-decode

Reveals a JWT's header, claims, and raw signature with timestamp explanations and security warnings, without verifying authenticity.

When to use it

Use when the user asks to inspect a JWT's contents or supplies a raw JWT string.

Give it a JWT string; it returns the decoded header and payload, raw signature, timestamp explanations, and security warnings.