JWT Decoder
Decode a JWT's header and payload to inspect its claims.
This tool only decodes a token's contents — it does not verify the signature. A valid-looking decoded token is not proof that it was issued by a trusted server.
This only decodes the token to reveal its contents — it does not verify the signature. A decoded token could have been tampered with. Never paste a token containing sensitive production secrets into a third-party website.
How It Works
- 1Paste a JWT.
- 2Its header and payload are decoded and shown as formatted JSON.
Features
- Decodes header and payload
- Clear warning about signature verification
Privacy
All processing happens instantly in your browser. Nothing you enter is ever sent anywhere.
Frequently Asked Questions
No. Signature verification requires the signing secret or public key, which this tool never asks for or has access to.