Skip to content
Quick Tools

JWT Decoder

Runs in your browser · nothing is uploaded

Inspect a token's header, payload and expiry.

Token
Header
Header appears here.
Payload
Payload appears here.

This decodes the token only — it does notverify the signature. Anyone can read a JWT's contents, so never treat a decoded payload as proof of authenticity, and never paste a production token you still rely on.