JWT Decoder for OAuth 2.0

Your data never leaves your browser

OAuth 2.0 tokens contain scopes, audience, and issuer. Decode to debug authorization.

Example

[Paste your OAuth 2.0 access token here]

Tips

  1. 1Check aud matches API.
  2. 2scope lists permissions.
  3. 3Check exp and iat.

Frequently Asked Questions

All OAuth = JWT?

No. Some are opaque tokens.

Safe for bearer?

Yes. Never use external decoders.

typ: at+jwt?

OAuth 2.0 access token (RFC 9068).