JWT Decoder

Securely decode JSON Web Tokens entirely in your browser.

Encoded JWT

Header

{}

Payload

{}

What is a JWT Decoder?

JSON Web Tokens (JWT) are base64-encoded strings used to securely transmit information between parties. Because they are only encoded, not encrypted, anyone can decode the header and payload. Our JWT Decoder unpacks these strings instantly and formats the underlying JSON structure securely within your browser.

How to use

1Paste your full encoded JSON Web Token into the left text area.
2The tool will instantly decode the base64-encoded string.
3The Header section reveals the algorithm and token type.
4The Payload section reveals the claims and user data stored inside.

JWT Decoder guide

Use this JWT decoder to inspect the header and payload of a JSON Web Token while debugging authentication flows. Decoding is local and read-only; it does not validate a token's signature or prove that a token is safe.

When to use it

Check the claims returned by an identity provider during sign-in.
Inspect an expiry or audience claim while debugging an API request.
Compare the decoded header with the expected signing algorithm.

Inspect an expiry claim

Input

eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiI0MiIsImV4cCI6MTczNTY4OTYwMH0.signature

Result

{
  "sub": "42",
  "exp": 1735689600
}

Common questions

Can this tool verify a JWT signature?: No. It only decodes the Base64URL header and payload for inspection.
Is it safe to inspect a production token?: Decoding is local, but production tokens are credentials. Prefer redacted or short-lived tokens whenever possible.

JWT Decoder

What is a JWT Decoder?

How to use

JWT Decoder guide

When to use it

Inspect an expiry claim

Common questions

Keep building

Related Tools

NEXTAUTH_SECRET

JWT_SECRET

CSRF Token