JWT Decoder
Decode JWT header, payload and signature — entirely client-side.
- Fastest ResultsInstant, no waiting
- Privacy First100% local
- No LoginJust open & use
- Mobile FriendlyWorks on any device
Input (Paste JWT)
0 characters
Output
Decoded
Auto-updated
How to Use
- Paste or type your input in the box on the left.
- Your result appears instantly in the output panel on the right.
- Click Copy to save the result.
- Use Clear to reset and start over.
Examples
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkRldlV0aWxzTm93IiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Frequently Asked Questions
No. The JWT is decoded entirely in your browser. Your token is never uploaded, logged or stored — important, since tokens are sensitive credentials.
No. This is a decoder, not a verifier. It reads the header and payload but does not check the signature against a secret, because that would require sharing your secret.
A JWT has a header (algorithm and token type), a payload (the claims), and a signature — each Base64URL-encoded and separated by dots.
Decoding is safe because it stays in your browser, but a JWT is still a credential. Avoid sharing tokens in screenshots or with others, and prefer expired or test tokens where possible.