JWT Decoder
Read a JWT's header and payload. The signature is not verified.
Runs in your browser — nothing is sent to a server
The signature is NOT verified
This tool only decodes the token's contents. It does not confirm that the token is authentic or issued by who it claims. Don't use it for security decisions.
About this tool
Paste a JSON Web Token and see the decoded contents of the header and the payload, formatted for readability. Common time fields (exp, iat, nbf) are also shown as calendar dates, so you can quickly tell whether a token has expired. Note: this tool does NOT verify the token's cryptographic signature — it only decodes it. Don't rely on it to decide whether a token is authentic. Decoding happens entirely in your browser; the token never leaves your device.