JWT Decoder

Paste a JWT and instantly see its header, payload and signature details — decoded locally in your browser.

Your token is decoded locally in your browser and never sent anywhere.

How to use JWT Decoder

  1. Paste the JWT (the long base64 string, usually starting with eyJ…).
  2. The header and payload are decoded and formatted automatically.
  3. Review the claims and copy what you need.

About this tool

JSON Web Tokens pack information — like user IDs and expiry times — into a compact, signed string. This tool decodes the two readable parts (the header and the payload) so you can inspect claims during development and debugging.

Important: decoding does not verify the signature. Anyone can read a JWT’s contents without the secret, so tokens should never carry sensitive data.

Frequently asked questions

Does this verify the token’s signature?
No. This tool only decodes the header and payload. It does not validate the signature or check expiry, so treat the contents as untrusted until verified server-side.
Is it safe to paste a JWT here?
The token is decoded entirely in your browser and never transmitted. Even so, avoid pasting tokens that contain secrets or that grant access to live systems.

Related tools

Base64 Decoder Decode Base64 text back to readable text or a file. JSON Formatter Format, indent and beautify JSON data so it is easy to read. Timestamp Converter Convert Unix timestamps to dates and dates to timestamps.