Tools / JWT Decoder
Free browser tool

JWT Decoder

Decode JWT header and payload data locally without transmitting the token.

Security: decoding does not verify the signature. Never treat decoded claims as trusted.

When to use the JWT Decoder

Use it to inspect the claims inside a JSON Web Token when debugging authentication, such as expiry, issuer, audience or roles.

Examples

  • Check whether a token's exp time has passed.
  • Confirm the aud claim matches the API you are calling.

Common mistakes

  • Assuming a decoded token is valid; decoding does not verify the signature.
  • Pasting production tokens into tools that send them to a server.