Debug Authentication Issues with JWT Decoder
Inspect JWTs from your app to debug login failures, permission issues, and token expiration problems.
🔒 The token is decoded entirely in your browser. Nothing is sent to any server.
Auth Debugging tips
When users report "I keep getting logged out," paste their token here to check the `exp` claim. Most session expiry bugs are off-by-one errors in token TTL config.
Check the `iat` (issued at) claim to see if tokens are being refreshed correctly. If `iat` is hours old when it should be minutes, your refresh flow is broken.
Look at the `aud` (audience) claim — many auth failures happen when a token issued for one service is sent to another that has different audience validation.
Tokens are decoded entirely in your browser — safe to use for production tokens during debugging. The decoder never sees them server-side.
Hoe dit werk
Hoekom ons gebruik?
Also check out…
Inspect API Tokens While Testing Endpoints
Decode JWTs returned by your API to verify the rig
Security Audit JWT Tokens
Review JWTs as part of a security audit — check fo
Inspect OAuth and OpenID Connect Tokens
Decode access tokens, ID tokens, and refresh token
Learn How JWT Tokens Work
Decode example JWTs to understand the structure: h