JWT Decoder
Decode a JWT header and payload locally (no signature verification).
Paste a JWT to inspect claims. This does not validate signatures.
Signature is not verified. Do not trust claims from untrusted tokens.
What does JWT decode do?
It Base64URL-decodes the header and payload segments for reading.
How to decode a JWT
- 1
Paste a JWT
Provide a three-part token (header.payload.signature).
- 2
Decode
Header and payload are Base64URL-decoded to JSON. Signature is shown but not verified.
- 3
Inspect claims
Copy JSON claims for debugging. Never paste production secrets into untrusted tools.
JWT Decoder FAQ
Does this verify signatures?
No. It only decodes. Verification needs your secret or public key offline.
Is the token stored?
No. It stays in browser memory for this page session.
Uploaded?
No.
Related tools?
Base64 Decoder; JSON Formatter; Hash Generator.