About this tool
A JWT (JSON Web Token) is a compact, signed token used for authentication in modern web apps. This decoder splits the token and shows its header and payload as readable JSON, so you can inspect claims like the user, expiry and issuer. Decoding happens entirely in your browser — your token is never sent anywhere.
How to use
- 1Paste your JWT.
- 2The header and payload decode instantly.
- 3Inspect the claims.
Benefits
- Shows header and payload.
- Runs locally — private.
- Readable JSON output.
Frequently asked questions
Does it verify the signature?+
No. It decodes the readable parts; signature verification needs the secret key and a backend.
Is it safe to paste a real token?+
Decoding is local, but avoid sharing production tokens publicly.