Free JWT Decoder
Decode any JSON Web Token (JWT) to read its header and payload instantly. This tool splits and Base64URL-decodes the token so you can inspect claims, expiry, and scopes without pasting your token into a server.
How to Use
Paste a JWT into the box. The header and payload are decoded and pretty-printed immediately. Expiry claims (exp, iat, nbf) are shown as human-readable dates so you can tell at a glance whether a token has expired.
- Decodes header and payload as formatted JSON
- Converts exp / iat / nbf timestamps to dates
- Shows the signature (not verified — decoding only)
- Everything runs locally; your token is never uploaded
Important: decoding is not verification
A JWT is only Base64URL-encoded, not encrypted — anyone can read its contents. This tool decodes the token but does NOT verify the signature. Never treat a decoded token as proof of authenticity; always verify signatures with the issuing secret or public key on your server. Because verification requires a secret, it cannot be done safely in a browser tool.
Related Developer Tools
You might also need
Tools from other categories that people pair with the JWT Decoder: