Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Stop pasting your JWTs into random websites to decode them

You've got a JWT and you need to see what's inside it — which user it's for, what scopes it carries, when it expires. The quick move is to search "jwt decoder," grab the first result, and paste your…

  • Decoding JWTs via random websites is discouraged due to security risks.
  • JWTs contain header, payload, and signature separated by dots.
  • Decoding JWTs locally avoids sending data to potentially insecure servers.

More from Thursday 3 September →