Developer Tools

JWT Decoder

Paste a JWT to decode its header and payload and read its claims, including human-readable issued and expiry times. Decoding only — your token stays in your browser.

Paste a JWT

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022
}

Issued (iat): Thu, 18 Jan 2018 01:30:22 GMT

Decoding only — the signature is notverified. Never paste production tokens you don't want exposed. Everything stays in your browser.

Frequently asked questions

Does this verify the token's signature?

No. It only decodes the header and payload so you can read them. Verifying the signature requires the secret or public key and should be done on your server.

Is it safe to paste my token here?

Decoding happens entirely in your browser and nothing is sent anywhere. Still, avoid pasting sensitive production tokens into any online tool as a general security habit.