Free JWT Decoder

Decode a JWT to read its header and payload claims (no verification).

Loading tool…
  • 🔒 Files never leave your device
  • ⚡ Converted in your browser
  • ✅ No account required

JWT Decoder: The Complete Guide

Paste a JSON Web Token (JWT) to instantly read its decoded header and payload. Timestamp claims like iat and exp are shown in human-readable form — all in your browser.

How to use the JWT Decoder

  1. Paste or type your code, text, or data into the input box.
  2. Adjust options such as indent size, dialect, or flags when the tool offers them.
  3. The output updates instantly — copy it to your clipboard or download the file.

Features

  • Decodes header & payload JSON
  • Human-readable iat / exp / nbf
  • Flags expired tokens
  • Runs locally — tokens never uploaded

Why use this tool

  • Debug auth flows quickly
  • Inspect claims and scopes
  • Safe — sensitive tokens stay on your device

What is a JWT?

A JSON Web Token (JWT) is a compact, URL-safe token with three Base64URL parts — header, payload, and signature — used for authentication and authorization. This decoder reads the header and payload so you can inspect claims. It does not verify the signature, which requires the issuer's secret or public key.

Frequently Asked Questions

Does it verify the signature?

No — verification needs the signing secret or public key, which you should never paste into a website. This tool only decodes the readable header and payload.

Is it safe to paste my token here?

Decoding happens entirely in your browser — the token is never sent to a server. Still, treat production tokens with care.

Is it free and private?

Yes — it's 100% free with no signup, and everything runs locally in your browser, so your data is never uploaded to a server.