Tool
JWT Decoder
Make a JWT's header and payload readable. See the date fields and whether the token has expired.
Runs in your browser — no data is sent to the server.
The signature is not verifiedThis tool only decodes the header and payload from base64url; it does not check whether the signature is valid. The token is never sent anywhere from your browser.
Header
Payload
Signature
- You can also paste a header value that starts with
Bearerdirectly. - A JWT payload is not encrypted: anyone who gets the token can read it. Never put secrets in it.
- Never paste live session tokens into sites you do not trust. This page makes no server requests; you can check that yourself in the Network tab of your browser's developer tools.