A JWT is three Base64url-encoded segments joined by dots:
header.payload.signature
This tool only decodes. It doesn't verify the signature. Decoding requires no secret; verifying does.
The nbf claim is in the future. Most servers will reject this token until then.
Paste a token to see its header.
Paste a token to see its payload.
Token is too long to include in the URL.