JWT Decoder
Decode JSON Web Tokens. Runs in your browser.
⚠ Decoding only — the signature is not verified.
How to use
Paste a JWT. The header and payload are decoded and pretty-printed, and time claims (exp, iat, nbf) are shown as dates.
This tool only decodes — it does not verify the signature, so never trust a token just because it decodes.
FAQ
Is my data sent anywhere?
No. This tool runs entirely in your browser. Nothing you type, paste or upload is sent to a server or stored anywhere.
Does this verify the signature?
No. Verifying needs the secret or public key. This tool only decodes the readable parts so you can inspect them.
Is it safe to paste a real token here?
The token never leaves your browser. Still, treat live tokens like passwords and avoid sharing them.