JWT Decoder
Inspect a JWT header and payload locally, with an explicit reminder that signatures are not verified.
Loading tool…
How to use JWT Decoder
Read the JSON inside a compact JSON Web Token for debugging. Treat all decoded claims as untrusted: decoding does not authenticate a user or verify a signature.
- Paste a three-part compact JWT.
- Decode its header and payload locally.
- Verify signature and application claims separately with your authentication system.
Good to know
- No signature, expiry, issuer, audience, or algorithm verification is performed.
- Encrypted tokens (JWE) and detached payloads are not supported.
- Up to 20,000 characters. Avoid sharing or saving real bearer tokens.
Common questions
Does a readable payload mean the token is valid?
No. Anyone can construct a readable payload. Only proper verification can establish authenticity and claim validity.
Is my token sent to a server?
No. Decoding happens in this browser, and this tool does not store the token.
Keep going with related tools
All developer →Base64 Decoder
Decode standard Base64 into UTF-8 text with strict alphabet, padding, and byte validation.
DeveloperJSON Viewer
Inspect a JSON document as a safe path, type, and value tree without executing its contents.
DeveloperUnix Timestamp Converter
Convert Unix seconds or milliseconds to UTC, or convert a timezone-explicit ISO date into a timestamp.
DeveloperJWT Signature Verifier
Verify a JWT signature against an explicit public JWK and selected claims.
DeveloperSigned JWT Test Fixture Builder
Create a local HS256 compact JWT test artifact from supplied JSON claims and an explicitly provided test key.
DeveloperCompact JWE Envelope Inspector
Inspect an encrypted JWE envelope, its untrusted protected header and the exact byte lengths of all five segments.