JWT Decoder
Decode a JSON Web Token to read its header and payload.
About the JWT Decoder
The JWT Decoder reads the header and payload of a JSON Web Token so you can inspect its claims — who issued it, when it expires and what it grants. Decoding happens entirely in your browser, and it does not verify the signature, so it is for inspection rather than trust.
Frequently asked questions
The token is decoded locally in your browser and never sent anywhere. Still, avoid pasting live production tokens into any online tool out of habit; use a test token where you can.
Verifying a signature requires the secret or public key that signed the token, which only the issuer holds. This tool reads the contents for inspection but cannot confirm the token is genuine.