JWT Decoder
Decode and inspect JSON Web Tokens. View header, payload, and signature.
JWT Token Input
Decoded Output
Output will appear here...
About the JWT Decoder
Paste a JSON Web Token to inspect its header, payload claims, and signature segment — the fastest way to check expiry times, scopes, and issuer fields while debugging authentication.
The token is decoded locally in your browser and never transmitted. Still, treat production tokens as secrets and prefer test tokens where possible.
Frequently asked questions
Does this tool verify the signature?expand_more
No — it decodes and displays the token’s contents only. Never treat a decoded token as trusted; signature verification must happen on your server.
Is my token sent to a server?expand_more
No — decoding happens entirely in your browser. As a general habit, avoid pasting live production tokens into any tool.
Why is my token failing to decode?expand_more
A JWT must have three dot-separated Base64URL segments. Truncated tokens, extra whitespace, or non-JWT strings will fail.