JWT Decoder
Decode and inspect JSON Web Tokens. Paste a JWT to view header and payload. Signature is not verified.
Decoded
JWT Decoder Tips
Three parts
A JWT has three base64url parts: header, payload, and signature, separated by dots.
Decode only
This tool only decodes and displays content. It does not verify the signature.
Claims
Common payload claims: sub (subject), exp (expiry), iat (issued at). Check exp before trusting a token.
Privacy
Decoding runs in your browser; the token is not sent to any server.
Secure & Private
Decoding happens in your browser only.
Instant
Paste a JWT and see header and payload in one click.
Readable output
Header and payload shown as formatted JSON.
Completely Free
No signup, no limits.
Decode JWT Tokens Online
Our JWT decoder decodes JSON Web Tokens and shows the header and payload in readable JSON. Useful for debugging auth tokens and API responses. Decoding is done in your browser; we do not verify the signature.
Related tools: web tools, base64 converter, hash generator, JSON formatter.
How to Use JWT Decoder
Step 1: Paste JWT
Copy the full JWT (header.payload.signature) from your app or API and paste it into the input.
Step 2: Decode
Click Decode. The header and payload will appear as formatted JSON below.
FAQs About JWT Decoder
Is the JWT decoder free?
Yes. It runs in your browser and does not send the token to any server.
Does it verify the signature?
No. This tool only decodes and displays the header and payload. For verification you need the secret or public key in a secure environment.
Is it safe to paste real JWTs?
Decoding runs locally; the token is not sent to our servers. Still, avoid pasting tokens that contain highly sensitive data in shared environments.
Try Other Free Web Tools
Conclusion & CTA
Decode JWT header and payload quickly with our free JWT decoder.