JWT Decoder
All JWT decoding runs locally in your browser; nothing is uploaded.
JWT Decoder
Paste a token to inspect its header, payload, claims, and security notes.
Summary
This tool decodes JWTs but does not verify the signature; do not trust the payload for authorization from this view alone.
Security notes
Claims
| Claim | Value | Status |
|---|
Header
Payload
Signature segment
- Present
- Length
- Preview
Decoding is not verification
This tool only turns Base64URL-encoded header and payload data back into readable JSON. A server must still verify the signature with a secret or public key before trusting any claim.