JWT Decoder

Decode JWT header and payload instantly.

JWT Token

Tokens are decoded locally in your browser. This tool does not verify the signature.

Header

Payload

Signature

Signature will appear here...

Changes update instantly

Examples

Input

JWT token with HS256 header and JSON payload claims

Output

Header: {"alg":"HS256","typ":"JWT"} | Payload: {"sub":"1234567890","name":"Toolzmint","admin":true}

Input

JWT token with exp, iat, and nbf claims

Output

Shows decoded header, payload, signature, and readable timing values such as Expires At and Issued At.

About this tool

Use this JWT decoder to inspect the header and payload of a JSON Web Token directly in your browser. It is useful for debugging authentication flows, checking claims, reading expiry times, and understanding token contents quickly.

How to use

  • Paste the JWT token into the input field.
  • Review the decoded header, payload, and signature instantly.
  • Check timing claims like expiry or issue time if they exist.

What a JWT decoder helps with

A JWT decoder helps you inspect the header and payload of a JSON Web Token without manually base64-decoding each section. This is useful when debugging authentication flows, checking custom claims, or confirming token metadata.

This online JWT decoder also surfaces common timing claims such as expiry, issued-at, and not-before values in a more readable form.

Decode versus verify

Decoding a JWT lets you read its contents. It does not prove that the token is valid or trusted. This tool is for inspection and debugging, not signature verification.

FAQ

Does this JWT decoder verify the token signature?

No. It decodes the token contents only. Signature verification requires the correct secret or public key and is outside the scope of this tool.

Can I see JWT expiry time here?

Yes. If the token includes common timing claims such as exp, iat, or nbf, the tool shows readable values for them.

Is the token decoded locally?

Yes. The decoding happens in your browser so you can inspect a token without sending it elsewhere just to read the header and payload.

Related Tools