Gezidao

JWT Decoder

Inspect a JWT's header and payload claims — nothing leaves your browser.

Report an issue

Advertisement

AHow to use

  1. 01 Paste the JWT into the input box.
  2. 02 Header and payload are decoded into readable JSON instantly.
  3. 03 Check the expiry status; the signature is shown but never verified.

QFAQ

Does this verify the signature? ＋

No. Decoding only reads the claims — signature verification requires your secret or public key. Never trust a token just because it parses.

Is it safe to paste a live token here? ＋

Decoding happens in your browser and nothing is transmitted or stored. Still, best practice is to test with expired or dummy tokens.

→Related tools

→ Encrypted Text Encrypt and decrypt text locally with AES-GCM. → Base64 Encoder & Decoder Encode or decode Base64 text, with full UTF-8 support. → Hash Generator MD5, SHA-1, SHA-256 and SHA-512 for text or files, computed locally. → URL Encoder & Decoder Percent-encode or decode URLs and query parameters safely.