JWT Decoder
Decode a JSON Web Token's header and payload locally to inspect its claims. This tool does not verify the token's signature.
JWT header and payload decoder
The token is read in this browser. Do not paste a token into a device or page you do not trust.
Header
Payload
Decoding does not verify a JWT
This tool only decodes the header and payload. It does not verify the signature, validate the issuer or audience, or prove who created the token. Never trust a decoded token for authorization.
How to use this tool
- Paste a compact token with three dot-separated segments.
- Select Decode token to inspect the JSON header and payload.
- If the payload contains a numeric
expclaim, its UTC expiration time and whether it has passed are shown.
Privacy and limits
Decoding happens in this browser; the token is not sent to a service or saved in browser storage. The signature is not decoded or verified. Read why decoding is different from verification or browse the tool directory.