JWT Decoder
Paste a JSON Web Token to read its header and claims. Decoded entirely in your browser — your token is never sent anywhere.
How it works
Frequently Asked Questions
No — this tool only decodes the token to show its contents. Signature verification will be a separate tool. Decoding never proves a token is authentic.
No. The token is decoded entirely in your browser and is never uploaded or stored.
Any JWT — it reads the header and Base64URL-encoded payload regardless of the signing algorithm.
Decode a JSON Web Token (JWT) online to inspect its header and payload, free and instantly. The decoder shows the algorithm and claims, and humanizes timestamps such as exp, iat and nbf into readable local time with an at-a-glance expiry badge. Because decoding happens entirely in your browser, your token never leaves your device — safe for debugging auth flows and inspecting access tokens. Note that decoding is not verification: it does not check the signature.