JWT Decoder
Decodes a JWT's header and payload so you can see what's inside — this only decodes, it doesn't verify the signature, and the token never leaves your browser.
This runs entirely in your browser. Your token is never sent to a server — check your browser's network tab if you don't believe us.
How to use this tool
JWT Decoder decodes a JSON Web Token's header and payload so you can see exactly what's encoded inside it.
- Paste a JWT.
- Its header and payload decode and pretty-print automatically.
- This only decodes the token — it doesn't and can't verify the signature without the signing secret, and never should be asked to.
Related reading: How to check that a "privacy-first" tool is actually private