jwt decoder

Decode any JWT.

Paste a JWT to inspect the header, payload, and signature. Decoding only, no signature verification. Nothing leaves your browser.

Signature not verifiedThis tool decodes only. It does not check the signature against a key, so a valid-looking payload here does not prove the token is authentic.
header
{
  "alg": "HS256",
  "typ": "JWT"
}
payload
{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022
}
signature
SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

Frequently asked

Is this tool free?
Yes. The JWT decoder is completely free. Decode and inspect as many tokens as you need.
Do I need to sign up?
No. Paste a JWT and see the decoded header and payload instantly. No account required.
Is my data private?
Your token never leaves the page. Decoding is just base64url parsing done in JavaScript in your browser. No data is sent to any server, so it is safe to paste production tokens.
Does it verify the signature?
No. This tool decodes and displays the header, payload, and expiration status, but it does not verify the cryptographic signature. Use a backend library for signature verification.