Developer Tools100% private
JWT Decoder
Decode and inspect JSON Web Tokens - header, payload, and signature - locally.
Header
{
"alg": "HS256",
"typ": "JWT"
}Payload
{
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022,
"exp": 1716239022,
"role": "admin"
}How it works
- 1Paste a JWTEnter a JSON Web Token - the three dot-separated base64url parts.
- 2InspectHeader, payload, and signature are decoded and displayed as formatted JSON.
- 3CopyCopy the header or payload JSON separately.
Frequently asked questions
What is a JWT?
JSON Web Token - a compact, URL-safe means of representing claims between two parties. Used for authentication: the server signs a token, the client sends it back with each request.
Does this verify the signature?
No. This tool decodes the header and payload for inspection. It does not verify the signature - that requires the signing key, which this tool doesn't have.
What if the token is expired?
The 'exp' claim in the payload shows the expiration timestamp. If the current time exceeds it, the token is expired and should not be used for authentication.