JWT Decoder
FreeDecode and inspect JWT tokens — header, payload, expiration, signature
jwttokendecodeauth
All Developer ToolsRelated tools
How it works
1
Paste
Paste a JSON Web Token into the input field.
2
Decode
The header and payload are instantly decoded and displayed as formatted JSON.
3
Inspect
Review claims like issuer, expiration, and subject, and check whether the token has expired.
Frequently asked questions
Does this tool verify the JWT signature?+
No. It decodes the header and payload, which are Base64-encoded and not encrypted. Signature verification requires the signing key, which should never be shared with a client-side tool.
Is my JWT sent to a server?+
No. Decoding runs entirely in your browser. Your token never leaves your device, so you can safely inspect tokens containing user data, permissions, or session details.
Can I see when a JWT expires?+
Yes. If the token contains an exp claim, the tool displays the expiration date in human-readable format and indicates whether the token is currently expired.
Is it safe to decode JWTs in a browser?+
Yes. JWT payloads are not encrypted, just Base64-encoded. Anyone with the token can decode it. The security of a JWT comes from its signature, not from hiding its contents.
What JWT formats are supported?+
The tool decodes standard JWTs with three dot-separated parts: header, payload, and signature. It supports both JWS (signed) and unsigned tokens.