Security · Developer tools
Decode a JWT.
Read a token's header and claims without uploading it. This page runs entirely in your browser and never verifies a signature.
Token
Decoded claims
Paste a JWT and press Decode token.
What this checks
- Header and payload: JWTs are three Base64URL sections. This tool decodes the first two JSON sections.
- Time claims: it displays issued-at, not-before and expiry claims in your local time.
- Not signature verification: decoding a JWT does not establish that it is authentic. Verify the signature and expected issuer in your application.