Werkery

JWT Decoder

Paste a JSON Web Token to decode its header and payload. Read claims, expiry, issuer, audience. 100% client-side — your token never leaves your browser.

Tool by ·
ad slot ()
ad slot ()

How it works

  1. 1
    Paste JWT
    The whole eyJ... string.
  2. 2
    Read claims
    Header + payload decoded.

Frequently asked

Does this verify the signature?

No. Decoding is reading; verifying requires the secret/public key. Most leaked-token incidents come from people pasting tokens into untrustworthy tools — we run entirely in your browser, but you should still rotate any token you paste into anyone else's tool.

What's in a JWT?

Three Base64URL parts joined by dots: header (algorithm), payload (claims like sub, iat, exp), signature. Header + payload are visible; signature is the cryptographic seal.

Get new tools first.

One tool per week. No ads. Unsubscribe anytime.

Related tools

Tool designed and editorially reviewed by Felix Brübach. Text drafted with AI assistance and reviewed for legal and factual accuracy before publication. Not legal advice — for complex cases, consult a lawyer.
ad slot ()