Skip to content

JWT Decoder — Header, Payload & Claims

Decode and inspect JWT tokens

JWT Token

Ctrl/⌘+S or Ctrl/⌘+Enter to run

Output

Result will appear here

This tool runs on your device — your files and inputs never go anywhere.

How to Use JWT Decoder

Decode and inspect JWT tokens No signup, and nothing gets uploaded for most use.

  1. 1

    Paste your JWT (the full token or the header.payload.signature part).

  2. 2

    The header and payload are decoded instantly.

  3. 3

    Read the claims like issuer, audience, and expiry time.

  4. 4

    Note: this tool decodes only — it never verifies signatures or secrets.

Why you might like it

  • Nothing to upload — the work happens on your device.
  • Free with no signup, no watermarks, and no daily limits.
  • Works in any modern browser on any device — nothing to install.
  • Usually done in a few seconds, so it doesn't get in your way.
Try JWT

Frequently Asked Questions

Does decoding a JWT expose my secret?

No secret is needed - a JSON Web Token's header and payload are base64-encoded, not encrypted, which is exactly what this decoder shows you. Never put secrets in a JWT payload.

Can it verify signatures?

Decoding shows claims and expiry; signature verification requires your signing key. Use the decoded values to debug why verification failed upstream.

Is pasting a token here safe?

Tokens are analysed locally and never leave your browser - though as good practice, avoid pasting production tokens into any tool unnecessarily.

Share: