Decode the header and payload of a JSON Web Token directly in your browser. View claims such as the algorithm, subject, issuer, audience, issued time and expiration without uploading the token.
This tool only decodes the token — it never verifies the signature. Always validate JWTs on a trusted server before acting on their contents.
Paste your JWT into the input field, then click Decode. Review the decoded header, payload and token details.
Decode the header and payload of a JSON Web Token directly in your browser. View claims such as the algorithm, subject, issuer, audience, issued time and expiration without uploading the token.
Paste your JWT into the input field, then click Decode. Review the decoded header, payload and token details.
A JSON Web Token, or JWT, is a compact token format commonly used to transmit claims between systems and applications.
No. Decoding only reads the encoded header and payload. It does not verify the token signature.
The tool decodes the token locally in your browser and does not need to upload it. Never share sensitive tokens unnecessarily.
Yes. If the token contains an expiration claim, the tool displays the expiration time and status.
No. Signature verification requires the appropriate trusted key and should be performed by a trusted server or application.