JWT Decoder
Decode and inspect JSON Web Tokens (JWT). View header, payload, and check expiration status.
JSON Web Tokens (JWT) are a compact, URL-safe means of representing claims between two parties. A JWT consists of three parts:
- Header - Contains the algorithm and token type
- Payload - Contains the claims (data)
- Signature - Verifies the token hasn't been tampered with
What this tool does
Inspect a JWT header, payload and available timestamp claims.
How to use it
Paste a token with its dot-separated sections and read the decoded JSON. Clear the token after inspection.
Worked example
Header eyJhbGciOiJub25lIn0 decodes to {"alg":"none"}; this says what the token claims, not that it is trustworthy.
Limitations and checks
Decoding does not verify signatures, issuer, audience or authorization. A readable or unexpired token can still be forged. Never make access decisions from this output.
How your data is processed
The operation runs in your browser. Copy and download actions use your device. Where Save work is offered, a local copy is stored; eligible work can sync only under your enabled account settings. See Privacy for site analytics and storage details.
Privacy and storage details · Report an incorrect result · Browse tools