JWT Decoder
Decode JWT header and payload as you paste. Claims like exp are summarized above the JSON.
JWT decoder
Decode header and payload as you paste. Signature is not verified here — use the bulk inspector for HMAC.
Decoding is not authorization. Close the tab if this was a live token. Many tokens from a log: bulk inspector.
JWT Structure at a Glance
A JSON Web Token has three parts:
header.payload.signature
The header and payload are Base64URL-encoded JSON. The signature is used to verify integrity.
What This Tool Does
This JWT decoder helps you inspect header and payload claims quickly during debugging. It is useful for checking fields like sub, aud, iss, and exp.
Security Note
Decoding a JWT is not the same as verifying it. Always validate the signature and claims on the backend before trusting a token.
Need a table of many tokens from a log? Use the Bulk JWT Inspector.