JWT decoder

Read the header and claims of a JSON Web Token.

Runs on your device

This tool runs in your browser. Your files and text are not uploaded.

Loading tool…
Decoding does not verify authenticity. Never trust claims from an unverified token.

How to use JWT decoder

  1. Paste a token.
  2. Read the header, claims and expiry.

Questions

Does this verify the token?

No. Decoding shows what the token says, not whether it is genuine. Anyone can make a token with any claims; only signature verification with the issuer’s key proves authenticity.

Is my token sent anywhere?

No. Decoding runs in your browser. Still, avoid pasting live production tokens into any website.

Related tools

More in Developer tools · All tools · Tool ID developers/jwt-decoder