JWT Decoder
Inspect the JSON header and payload of a JWT locally for debugging. The tool does not transmit the token or claim that it is authentic.
Runs locally in your browser
Decoded only. The signature is not verified, so do not trust claims based on this view alone.
What is the JWT Decoder?
Inspect the JSON header and payload of a JWT locally for debugging. The tool does not transmit the token or claim that it is authentic.
How to use it
- 1Paste a three-part JWT.
- 2Read the decoded header and payload.
- 3Clear the token when finished.
How it works
The first two Base64url parts are decoded as UTF-8 JSON. The third part is a signature and is left untouched.
Inspect an expiration claim
A payload containing “exp” can be read as JSON, then its Unix timestamp checked with the timestamp converter.
Limitations & notes
- Decoding does not verify the token signature.
- Do not treat the visible claims as trusted authorization data.
No directly related discussion yet.
Start a focused thread and share the question this tool helped you explore.
Ask the community about JWT Decoder