Decoding happens in your browser. The signature is shown but not verified.
Processing and privacy
Processing varies by tool. Check the instructions for local processing, server requests, external services and any file or request limits before entering sensitive information.
Read the privacy policyShare this tool
Found it useful? Send it to a friend or teammate.
Rate this tool
5.0
1 rating
- 5 stars 1
- 4 stars 0
- 3 stars 0
- 2 stars 0
- 1 star 0
Clear instructions
Find steps, examples and limitations below.
Use online
Open the tool in a supported web browser.
Free to use
No sign-up required. Tool-specific limits may apply.
How to use the JWT Decoder
Inspect the readable header, payload and claims inside a JSON Web Token.
- 1 Paste a token into Encoded token.
- 2 Review Header, Payload and Claims, including any displayed time-related claims.
- 3 Copy the information needed for debugging without sharing a live credential.
Example and practical tips
Decode a non-production sample token to inspect its subject and expiry fields.
Frequently asked questions
Does decoding prove that a token is genuine?
No. The signature is not verified by this decoder. Never authorize access based only on decoded claims.
Are tokens safe to paste into any website?
Treat live tokens as credentials. Use test tokens for debugging and avoid exposing tokens that grant access.
Practical guides
-
How to Use JWT Decoder
Decode JSON Web Tokens online. Inspect the JWT header, payload and claims, in a readable format. Free JWT decoder that runs locally in your browser.
Report an issue
Something broken or not quite right? Tell us and we will look into it.