Developer / No account needed
JWT Decoder Online Without Signup
Use this JWT decoder to inspect the header and payload of a three-part JSON Web Token locally in your browser. Decoding shows what a token says; it does not verify its signature or prove that its claims are trustworthy.
Signature not verified. Decoded claims do not prove identity, validity or authorization.
Decode is not verify
A JWT payload is encoded, not necessarily encrypted. Anyone can create a token with arbitrary claims. This tool does not check a signing key, issuer, audience or authorization rules. Encrypted five-part JWE tokens are not supported.
A few things worth knowing
Does an unexpired token mean it is valid?
No. A timestamp is only a claim. Signature, algorithm, issuer, audience and application checks are still needed.
Are tokens saved?
This tool does not persist tokens in browser storage or send them to a decoding service. Clear the field when you finish.