JWT Decoder
Paste a JSON Web Token to decode its header and payload. Read claims, expiry, issuer, audience. 100% client-side — your token never leaves your browser.
ad slot ()
ad slot ()
How it works
- 1Paste JWTThe whole eyJ... string.
- 2Read claimsHeader + payload decoded.
Frequently asked
Does this verify the signature?
No. Decoding is reading; verifying requires the secret/public key. Most leaked-token incidents come from people pasting tokens into untrustworthy tools — we run entirely in your browser, but you should still rotate any token you paste into anyone else's tool.
What's in a JWT?
Three Base64URL parts joined by dots: header (algorithm), payload (claims like sub, iat, exp), signature. Header + payload are visible; signature is the cryptographic seal.
Get new tools first.
One tool per week. No ads. Unsubscribe anytime.
Related tools
Tool designed and editorially reviewed by Felix Brübach. Text drafted with AI assistance and reviewed for legal and factual accuracy before publication. Not legal advice — for complex cases, consult a lawyer.
ad slot ()