← Tools

JWT Decoder

JWT ke andar kya hai padhein aur check karein ki woh asli hai.

Private: aapki files aapke device se bahar nahi jaati.

Aapka token aur keys isi device par rehte hain. Kuch bhi kahin nahi bheja jaata.

Kaise kaam karta hai

  1. Apni files chunein.
  2. Chahein to settings badlein.
  3. Result download karein, ya BroAllDone se doosre device par bhejein.

Aksar poochhe jaane wale sawal

JWT decode kaise karein?

Token paste karein. Uska header aur payload turant dikh jaata hai, har claim samjhaya hota hai aur exp aur iat jaise times dates ki tarah dikhte hain.

Kya yeh bata sakta hai ki token expire ho gaya?

Haan. Aap dekhte hain ki woh valid hai, expire ho gaya hai ya abhi valid nahi hai, aur kab expire hoga, jaise 2 ghante mein.

Signature verify kaise karein?

HS256, HS384 ya HS512 ke liye secret paste karein, ya RS, PS, ES aur EdDSA tokens ke liye public key: PEM key, certificate, JWK ya poora JWKS. Sahi key uske kid se apne aap chun li jaati hai.

Kya yahan token paste karna safe hai?

Haan. Decode aur verify aapke browser mein hota hai, isliye aapka token aur keys kabhi aapke device se bahar nahi jaate. Phir bhi live tokens ko passwords ki tarah sambhal kar rakhein.

Yeh kyon keh raha hai ki token signed nahi hai?

Header mein alg: none likha hai, yaani koi bhi ise likh sakta tha. Aise token ko kabhi kisi baat ka proof na maanein.

Encrypted tokens ka kya?

JWE mein teen ki jagah paanch parts hote hain. Uska header dikhaya jaata hai, lekin contents sirf private key se padhe ja sakte hain.

Aur free tools