JWT claims are statements about an entity (typically a user) and additional metadata serialized as key-value pairs inside a JSON Web Token payload.
JWT Claims are key-value pairs encoded within the JSON payload of a JSON Web Token (JWT) per RFC 7519. Claims convey user identities, token validity periods, authorization permissions, and audience constraints.
Inspect and decode JWT claims instantly using our client-side JWT Decoder or convert Unix expiry timestamps with the Timestamp Converter.
| Claim | Full Name | Purpose & Type | Example |
|---|---|---|---|
iss |
Issuer | Identifies who created the token (string / URL) | https://auth.company.com |
sub |
Subject | Unique principal identifier (User ID) | usr_948194ad8 |
aud |
Audience | Target recipient of the token | https://api.company.com |
exp |
Expiration Time | Unix timestamp after which token is invalid | 1700000000 |
nbf |
Not Before | Unix timestamp before which token must not be accepted | 1699990000 |
iat |
Issued At | Unix timestamp when token was created | 1699990000 |
jti |
JWT ID | Unique identifier for the token (prevents replay) | e83719bc-4882 |
Free, browser-based utilities to test, generate, and inspect JWT Registered & Private Claims (RFC 7519) payloads directly.
Decode, inspect, and validate JWT tokens with claim and signature analysis.
Encode and decode Base64 strings, files, and data URIs instantly.
Convert between Unix timestamps, ISO 8601, and human-readable dates instantly.
Generate and verify cryptographic hashes with multiple algorithms.
