Online
JWT Decoder
Decode a JSON Web Token (JWT) to inspect its header and payload. Paste your token on the left and the decoded JSON appears on the right — all in your browser, with nothing sent to a server.
Console
jwt-decoder
Operation
- 01 Paste a JWT (header.payload.signature) into the box on the left.
- 02 Read the decoded header and payload JSON on the right.
- 03 Copy any section, or clear the input to start over.
Reference
- Is my JWT sent to a server?
- No. Decoding happens entirely in your browser. Your token is never transmitted or stored, so it is safe to decode tokens that contain sensitive claims.
- Does this verify the token signature?
- No. This tool decodes and displays the token contents only. Verifying the signature requires the signing key or secret, which is out of scope for a decoder.
- What are the three parts of a JWT?
- A JWT has three base64url-encoded parts separated by dots: a header (algorithm and type), a payload (the claims), and a signature used to verify integrity.