Developer Tools

JWT Decoder

Paste a JWT token to decode its header and payload. View the algorithm, type, expiration, and issued-at timestamps as human-readable dates.

What is a JWT?

A JSON Web Token (JWT) is a compact, URL-safe token format used for authentication and information exchange. It consists of three base64url-encoded parts: header, payload, and signature.

Features

• Decode header and payload
• Show algorithm and type
• Human-readable timestamps
• Expiration status check
• Copy decoded JSON

Does this verify the signature?

No. This tool only decodes and displays the header and payload. Signature verification requires the secret key or public key, which should never be shared in a browser tool.

Is it safe to paste my JWT here?

All decoding happens in your browser — nothing is sent to a server. However, JWTs may contain sensitive claims, so avoid sharing tokens from production environments.

What claims are highlighted?

The decoder highlights common claims: alg (algorithm), typ (type), iat (issued at), exp (expiration), sub (subject), iss (issuer), and aud (audience).