JWT Decoder
Developer ToolsDecode and inspect JSON Web Token headers and payloads.
Expired
Valid (exp not passed)
Header
Payload
- Issued at
- Expires
- Signature
What is JWT Decoder?
JWT Decoder inspects the header and payload of a JSON Web Token without sending it anywhere.
How to use JWT Decoder
- 1 Paste a JWT.
- 2 Read the decoded header and payload.
- 3 Check the claims such as expiry.
Supported formats and limits
- Input: JSON Web Token
- Output: decoded header and payload
- Runs in your browser
Common uses
- Inspect the claims inside a token while debugging.
- Check expiry and issued-at values.
- Understand a token without sending it anywhere.
Things to know
- Decoding does not verify the signature — never trust an unverified token.
- It is not a security audit of the token issuer.
Privacy and file handling
Decoding is local; your token is never uploaded.
Frequently asked questions
Does this verify the signature?
This tool decodes and displays the token contents. It does not validate the signature against a secret or public key.
Does decoding a JWT verify its signature?
No. Decoding only reads the header and payload; it does not confirm the token is authentic or untampered.
Is my token uploaded?
No. The token is decoded in your browser.
What are the three parts of a JWT?
A header, a payload and a signature, separated by dots.
Related tools
JSON Formatter
Format, validate, and minify JSON with clear error messages.
Developer Tools
Open tool
Base64 Encoder
Encode and decode Base64 text safely in your browser.
Developer Tools
Open tool
Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes.
Developer Tools
Open tool
Random Token Generator
Generate cryptographically strong random tokens and keys.
Developer Tools
Open tool