JWT Decoder

Inspect the header and payload of a JSON Web Token in your browser. Useful for debugging claims, expiry timestamps and API integrations.

Important: decoding is not verification. The tool does not validate the signature, issuer or trustworthiness of a token.

Readable claims

View JSON header and payload sections with indentation for easier inspection.

The token is decoded in the browser by the core tool and is not intentionally uploaded to our processing server.

Use test tokens whenever possible. Treat real access tokens as secrets and rotate them if exposed.

Can this tool verify a JWT?

No. Verification requires the correct algorithm, key and application policy. This tool only decodes two token segments.

What does a JWT contain?

A compact JWT commonly contains a Base64URL-encoded header, payload and signature separated by periods.