Decode JWT tokens in your browser: inspect header, payload, claims, and expiration. The signature is not verified. Free, private, no signup or upload.
0 characters
Paste a JWT token to decode.
100% browser-based
Runs locally in this tab
No upload required
Your files never leave this device
Nothing is stored
Close the tab and the input is gone
Instant results
No queue and no server wait
Paste a three-part token and read the header and payload as JSON. Algorithm, type, and custom claims are easier to inspect than in a one-line Authorization header. The signature is shown as the third segment so you can confirm the token is complete — it is not verified here.
When exp, iat, or nbf are present, the workspace translates them into how long the token is still valid or how long ago it expired. That beats doing Unix-time math when you are debugging a 401 from an API.
Signature checks need the secret or public key and are intentionally not performed. Use this decoder to read what the token says, not to prove it is authentic. Never paste a production secret into a webpage to “verify” a JWT.
The token is decoded in your browser. Access tokens and ID tokens never leave the tab. There is no upload and no account, which matters when the payload contains user IDs or emails.
Copy the full three-part token, including dots, into the field. A typical value starts with eyJ. You do not upload a file.
Each section decodes to JSON. Check alg and typ in the header, then the claims in the payload.
If exp is present, you will see whether the token is still valid and by how much. Other registered claims are listed when they exist.
Copy header or payload JSON into your notes or a ticket. Remember: this tool does not verify the signature, and nothing is stored on a server.
Straight answers on privacy, limits, and how the workspace behaves.
More from Developer.
Format, beautify, minify, and validate JSON in your browser. Syntax highlighting, error detection, and key sorting — free, instant, no signup or upload.
Developer
Validate JSON in real time with line and column errors. Auto-repair trailing commas, unquoted keys, and single quotes — free, private, no signup or upload.
Developer
Test regular expressions against sample text
Developer
Encode and decode Base64 in your browser with Unicode, URL-safe alphabet, and live conversion. No upload, no signup — free online Base64 encoder and decoder.
Developer
URL-encode and decode query strings and full URLs with encodeURI or encodeURIComponent. Component vs full URI, live conversion — free, private, no upload.
Developer
Encode and decode HTML entities with named or numeric modes, special characters or all characters, and a live preview. Free developer tool, no upload.
Developer