JWT Decoder

Decode a JSON Web Token's header and payload.

Advertisement

Decoding only — the signature is not verified. Never paste production tokens you need to keep secret.

Advertisement

About the JWT Decoder

JWT Decoder splits a JSON Web Token into its three parts and shows the header and payload as nicely formatted JSON, so you can quickly inspect claims like the subject, expiry and issuer. It only decodes — it does not verify the signature — and because it runs entirely in your browser, your token never leaves your machine.

How to use it

  1. Paste a JWT (the long string with two dots).
  2. Click 'Decode' to read the header and payload.
  3. Inspect the claims; copy anything you need.
Advertisement

Frequently asked questions

Does it check if the token is valid?

No. It decodes the contents for inspection but does not verify the signature, which requires the secret or public key.

Is my token sent anywhere?

No. Decoding is done locally in your browser, so the token is never uploaded.

Related tools

Advertisement