JWT Decoder
JWT Decoder: free, fast and private. Works in your browser, nothing is uploaded, no sign-up needed.
How to use
Decode a JSON Web Token to read its header and payload and see when it was issued and when it expires. Decoding happens in your browser. Note that decoding does not verify the signature, so a readable token is not necessarily a valid or trustworthy one.
- Paste or type your input.
- Adjust the options.
- Copy the result.
More tools
Frequently asked questions
Does this verify the signature?
No. Verifying requires the secret or public key. This tool only decodes the header and payload.
Is a JWT encrypted?
A standard signed JWT is only encoded, not encrypted, so anyone holding the token can read its contents. Do not put secrets in a JWT payload.
Is it free?
Yes. All tools are free, with no sign-up and no limits.
Is my code or data uploaded?
No. Everything runs locally in your browser, so your code and data stay private.
Does it work on mobile?
Yes. It works in any modern mobile or desktop browser.