JWT Decoder
Decode a JWT header and payload locally without verifying its signature.
Inputs stay on your device; no account required.
Supports three-part JSON Web Tokens, up to 50,000 characters. Decoding does not prove authenticity or authorization; encrypted five-part JWE tokens are not supported.
Save this page in your browser bookmarks to use it again.
About this tool
Decode a JWT header and payload locally without verifying its signature. Supports three-part JSON Web Tokens, up to 50,000 characters. Decoding does not prove authenticity or authorization; encrypted five-part JWE tokens are not supported.
How to use
- Paste a three-part JWT into the input field.
- Decode and inspect the header and payload as JSON.
Example
A demo token with {"sub":"demo"} displays its payload; the signature is not verified.
Frequently asked questions
Does decoding prove that a token is valid?
Supports three-part JSON Web Tokens, up to 50,000 characters. Decoding does not prove authenticity or authorization; encrypted five-part JWE tokens are not supported.
Do I need an account?
No. This free tool can be used without creating an account.
Where is my input processed?
This tool processes its input in your browser. Tool input is not uploaded for processing. General site usage statistics are separate; see the privacy policy.