JWT decoder
JWT decoder — free
Decode a JSON Web Token’s header, payload and claims, check expiry and verify HS256/384/512 signatures. Your token and secret never leave your browser.
JSON Web Tokenheader, payload and claims — decoded on your device
Paste a token to begin. A JWT is three Base64URL parts —
header.payload.signature — and the first two are only encoded, never encrypted. Nothing here is uploaded; the secret you type stays in this tab. This box is never rememberedNot saved in this browserNever put in a shareable linkClose the tab and it is goneA JWT is a bearer credential — anyone holding it can act as you until it expires
Decoded on your device — your token & secret never leave the browser.