JWT Decoder
Decode a JSON Web Token header and payload without sending it to a server.
JWT Decoder workspace
About JWT Decoder
A JWT contains Base64URL-encoded header and payload sections plus a signature. Decoding helps inspect claims, but it does not prove the token is authentic or trustworthy.
How to use
- Paste the compact JWT.
- Review its decoded header and payload.
- Check time claims and verify the signature in your application.
FAQ
Does this verify the JWT signature?
No. Decoding only reveals the token contents. Signature verification requires the correct secret or public key and allowed algorithm.