مفكك تشفير رموز JWT عبر الإنترنت
فك تشفير رموز JWT عبر الإنترنت بسرعة وأمان 100% داخل متصفحك.
الأسئلة الشائعة (FAQ)
Why does my JWT show an 'invalid signature' warning?
A JWT signature warning occurs because signature verification requires the original secret key or public key. Without the key, the decoder can display header and payload contents but cannot verify if the token was tampered with or issued by a trusted server.
What does alg: none mean and why is it flagged?
The 'alg: none' header specifies that the JWT has no digital signature algorithm applied. This leaves the payload unprotected and vulnerable to spoofing. Modern security standards flag 'alg: none' as an insecure configuration.
Why does my token say it's expired?
JWT payloads include an 'exp' (expiration time) claim containing a Unix timestamp. If the current Unix timestamp is greater than the 'exp' value, the token has expired and will be rejected by authenticating servers.
What is the difference between JWT header, payload, and signature?
A JSON Web Token consists of three dot-separated Base64URL parts: the Header (specifying algorithm and token type), the Payload (containing claims like user ID and expiration), and the Signature (verifying message integrity).