JWT Decoder
Enter a JWT and instantly inspect its Header and Payload in your browser. Decoding is not signature verification.
The JWT you enter is processed only in your browser.
JWT structure
- Header
- Algorithm and token metadata
- Payload
- Claims
- Signature
- Signature data used to verify tampering (this tool does not verify it)
Decoding and verification are different operations.
Share
What does the JWT Decoder do?
It separates a compact JWT into its encoded segments, decodes readable Header and Payload JSON, and highlights common time claims such as exp, nbf, and iat.
How to use it
- 1
Paste a token
Enter a compact JWS with three segments or an unsecured two-segment JWT.
- 2
Inspect decoded data
Review the Header, Payload, token structure, and interpreted time claims.
- 3
Copy only what you need
Use the JSON or tree views without treating the decoded token as trusted.
Practical examples
Header
{"alg":"HS256","typ":"JWT"}Payload
{"sub":"123","exp":1893456000}Processing rules and limitations
Decoding is not verification
The tool does not validate a signature, key, issuer, audience, or authorization policy.
Base64URL segments
JWT segments use URL-safe Base64 and may omit padding.
Time claims
NumericDate claims are displayed for convenience, but the issuing system decides how they are enforced.
Tokens are decoded locally
The JWT and decoded values are processed in this browser and are not sent to or stored on the server.
Frequently asked questions
Does a readable payload mean the token is valid?
No. Anyone can construct encoded segments; validity requires signature and claim verification by the receiving system.
Can I paste a production access token?
Avoid exposing active credentials unnecessarily. Decoding is local, but sensitive tokens should still be handled carefully.
Why is the signature not decoded as JSON?
The final segment is cryptographic signature data, not a JSON document.
Related token and encoding tools
Base64 Encoder/Decoder
Choose a character encoding to convert between text and Base64.
Open toolJSON Formatter
Format JSON for readability or remove unnecessary whitespace to minify it.
Open toolURL Encoder/Decoder
Convert a full URL or component with UTF-8 percent encoding.
Open toolRegex Tester
Test JavaScript regular expressions, matches, capture groups, and replacements.
Open toolOther popular tools
Password Generator
Choose a length and character types, or build an easy-to-remember passphrase, for a secure password.
Open toolQR Code Generator
Turn text or a URL into a QR code in your browser and save it as PNG.
Open toolWord Counter
Count characters, non-whitespace characters, words, and lines instantly.
Open tool