Does this verify the signature?

No. Verifying a signature requires the secret or public key, so this tool only decodes and displays the contents.

Is my token sent to a server?

No. Decoding runs entirely in your browser, which matters because tokens often carry sensitive claims.

What if my token is not valid?

If the token cannot be split and decoded, an error is shown instead of partial output, so you can spot a truncated or malformed token quickly.

JWT

JWT Decoder

Decode a JWT and inspect its header, payload, and expiry claims.

Input

JWT

The signature is not verified. Decoding only shows the contents.

Result

Please input

JWT Decoder

Paste a JSON Web Token to read its header and payload as formatted JSON, with issued-at, expiry, and not-before claims shown as readable dates. Decoding happens in your browser and the token is never uploaded.

How to use

Paste your JWT into the input field.
The header and payload are decoded and pretty-printed instantly.
Check iat, exp, and nbf as readable timestamps.
Copy any section you need for debugging or a bug report.

Frequently asked questions

Does this verify the signature?: No. Verifying a signature requires the secret or public key, so this tool only decodes and displays the contents.
Is my token sent to a server?: No. Decoding runs entirely in your browser, which matters because tokens often carry sensitive claims.
What if my token is not valid?: If the token cannot be split and decoded, an error is shown instead of partial output, so you can spot a truncated or malformed token quickly.