JWT Decoder

Paste a JWT to see its header and payload as readable JSON. The signature is not verified — this is decoding only.

JWT token
⚠ Signature NOT verified. This only decodes the contents — it does not confirm the token is authentic.
Header
Payload

Use cases

  • Quickly inspecting claims inside a token while debugging
  • Checking the expiry (exp) without hitting a server
  • Learning a JWT's structure before integrating with it

FAQ

Does this confirm the token is valid?

No. The signature — and therefore the token's authenticity — is NOT checked, only the contents are decoded. Verifying a signature requires the issuer's secret or public key, which this tool never asks for.

Is it safe to paste a real token here?

Processing is fully local in your browser — the token is never sent anywhere. As general practice, though, avoid sharing real sensitive tokens in public places.

Related tools