Jwt Decoder
JWT Decoder
Decode JWT header and payload online — inspect JSON Web Tokens instantly in your browser.
Your data never leaves your browser — all processing happens locally on your device.
This tool decodes JWT header and payload only. It does not verify signatures. Avoid pasting production secrets.
About this tool
The JWT Decoder splits a JSON Web Token into its header and payload JSON for debugging auth flows. Paste any JWT to read claims, expiry (exp) and algorithm (alg). This tool does not verify signatures — use it for inspection only. Tokens are processed locally and never sent to a server.
How to use the JWT Decoder
- 1
Paste your JWT
Paste the full token (header.payload.signature).
- 2
Decode
View formatted header and payload JSON.
- 3
Inspect claims
Check iss, sub, exp and custom claims for debugging.
Frequently Asked Questions
Does this verify the JWT signature?
No. This decoder only reads header and payload segments. Signature verification requires the secret key on a trusted server.
Is it safe to paste tokens here?
Processing is local, but avoid pasting production secrets. Treat decoded tokens like credentials.
What if the token is expired?
Check the exp claim in the payload — we show the raw Unix expiry when present.