Encoding
JWT Decoder
Paste a JWT to inspect its header and payload locally. Decoding is not signature verification, so use it for inspection only.
Decoding does not verify the JWT signature. Avoid pasting sensitive production tokens.
Runs locally in your browser. Your input is not uploaded.
How this tool works
JWTs contain a header, payload, and signature separated by dots.
This decoder reads the first two Base64URL parts locally and displays formatted JSON so you can inspect claims.
Examples
- Inspect an exp claim and convert it with the timestamp tool.
- Check which algorithm is listed in a token header.
Common use cases
Token debugging
Claim inspection
Auth integration checks
FAQ
Does decoding verify the JWT?
No. This tool only decodes Base64URL parts and formats JSON. It does not verify signatures.
Should I paste production tokens?
Avoid pasting sensitive tokens unless you are comfortable inspecting them locally on this device.