Decoding happens locally. Verification with a secret is not performed in this tool.
JWT Decoder
Decode header, payload, and signature from a JWT. Everything runs locally — tokens are never uploaded.
About JWT Decoder
Decode a JSON Web Token to reveal its header, payload, and signature. Inspect standard claims such as issuer, audience, and expiry without ever transmitting the token over the network.
Features
- Decode header and payload in real time
- Inspect standard claims like exp, iat, iss, and aud
- Identify the signing algorithm from the header
- Keep tokens private — nothing is sent to a server
How to use
- 1Paste your JWT into the input field.
- 2Review the decoded header and payload sections.
- 3Check claim values such as expiry and issuer.
Frequently Asked Questions
Are my tokens sent anywhere?
No. Decoding happens locally in your browser, so sensitive tokens never leave your device.
Does this verify the JWT signature?
The tool decodes and inspects the token. Signature verification requires the secret or public key and should be done in a trusted environment.
What token formats are supported?
Standard JWTs using base64url-encoded header and payload segments are supported.
Related Utilities
- JSON DiffCompare two JSON documents semantically.
- Regex TesterTest, validate and debug regular expressions.
- URL ParserParse a URL and extract its components.
- Text Diff ViewerCompare text and highlight differences.