🔧 Utility Tools
JWT Decoder
Decode JSON Web Tokens (JWT) instantly. Inspect header, payload, and signature. Detects expiry, issuer, audience, and standard claims. Nothing uploaded.
🔥 Used 15,672 times this month
JWT token (paste here)
💡 Ctrl+D (Cmd+D on Mac) to bookmark for next time
How it works
01
Paste JWT
Paste your JWT token — usually starts with "eyJ".
02
Auto-Decode
Header, payload, and signature parse instantly.
03
Inspect Claims
See expiry, issuer, subject, and all custom claims.
Frequently asked questions
What is a JWT?
JWT (JSON Web Token) is a compact way to transmit claims between two parties. It has three parts separated by dots: header.payload.signature. Widely used for authentication in APIs and web apps.
Can I verify the signature here?
No. Signature verification requires the secret key (HS256) or public key (RS256/ES256) which should never leave your server. This tool only decodes — verification must happen server-side.
Is my JWT sent to a server?
No. All decoding happens in your browser using JavaScript. Your token never leaves your device — important since JWTs often contain sensitive user data.
What are standard JWT claims?
Common: iss (issuer), sub (subject/user), aud (audience), exp (expiry), nbf (not before), iat (issued at), jti (unique token id). This tool highlights these automatically.
All tools are free, browser-based, and process files locally — your data never leaves your device.
Read our Privacy Policy |
Visit our blog for tips and guides.