Jwt Decoder

JWT Decoder

Decode JWT header and payload online — inspect JSON Web Tokens instantly in your browser.

Your data never leaves your browser — all processing happens locally on your device.

This tool decodes JWT header and payload only. It does not verify signatures. Avoid pasting production secrets.

About this tool

The JWT Decoder splits a JSON Web Token into its header and payload JSON for debugging auth flows. Paste any JWT to read claims, expiry (exp) and algorithm (alg). This tool does not verify signatures — use it for inspection only. Tokens are processed locally and never sent to a server.

How to use the JWT Decoder

  1. 1

    Paste your JWT

    Paste the full token (header.payload.signature).

  2. 2

    Decode

    View formatted header and payload JSON.

  3. 3

    Inspect claims

    Check iss, sub, exp and custom claims for debugging.

Frequently Asked Questions

Does this verify the JWT signature?

No. This decoder only reads header and payload segments. Signature verification requires the secret key on a trusted server.

Is it safe to paste tokens here?

Processing is local, but avoid pasting production secrets. Treat decoded tokens like credentials.

What if the token is expired?

Check the exp claim in the payload — we show the raw Unix expiry when present.