JWT Decoder
Read the header and payload of a JSON Web Token and check its time-based claims. This tool does not verify the signature, issuer, or audience.
Runs in your browser
No account. No upload.
Workspace
LOCAL
Decoding is not verification. This tool never checks the signature, issuer, or audience. Do not paste production tokens or secrets you do not own.
Token input
0 characters · The signature is never verified.
Header
Decode a token to inspect its header.
Payload
Decode a token to inspect its payload.
Registered claims
Decode a token to inspect its registered claims.
Signature
Decode a token to inspect its signature.
How to use
- 1Paste a JWT into the input panel.
- 2Decode it to read the header, payload, and registered time claims.
- 3Treat the result as unverified data until your server validates the token.
Examples
Check expiration
Read the exp claim as a date before debugging an expired session.
Inspect custom claims
See which scopes, roles, or tenant identifiers a token carries.
Compare environments
Check the iss and aud claims when a token works in one environment but not another.
Privacy
Tokens are decoded in your browser and are never uploaded. Decoding does not verify the signature. Do not paste production secrets or tokens you do not own.
Do not paste secrets or production credentials into any browser tool.
Related tools
All toolsBase64 Encoder & Decoder
Encode UTF-8 text to Base64 and decode it back safely.
Open toolJSON Formatter & Validator
Format, minify, and validate JSON with clear syntax errors.
Open toolUUID Generator
Generate cryptographically secure UUID v4 identifiers.
Open tool