JWT Decoder
Decode a JSON Web Token to read its header and payload, with exp, iat and nbf shown as dates. The signature is not verified.
Runs in your browserJWT → JSON
Loading tool…
Example
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkFkYSBMb3ZlbGFjZSIsImlhdCI6MTUxNjIzOTAyMiwiZXhwIjoxNTE2MjQyNjIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Header
{
"alg": "HS256",
"typ": "JWT"
}
Payload
{
"sub": "1234567890",
"name": "Ada Lovelace",
"iat": 1516239022,
"exp": 1516242622
}
Claims
iat (issued at): 2018-01-18T01:30:22.000Z
exp (expires): 2018-01-18T02:30:22.000Z (expired)
sub: 1234567890
Signature: present (HS256) but NOT verified. Decoding does not prove the token is genuine.How to use the JWT Decoder
- Paste or type your JWT into the input area, or open a file from your device.
- Adjust the options above the editor if the tool offers any.
- Review the JSON result, then copy it or download it as a file.
Privacy and limitations
- Your data is processed on your device and is not uploaded to any server.
- Encrypted tokens (JWE, five parts) cannot be decoded without the key.
Frequently asked questions
Is it safe to paste a token here?
Decoding happens entirely in your browser and nothing is uploaded. Still, treat live tokens like passwords and prefer expired or test tokens.
Why is the signature not verified?
Verification needs the secret or public key. Anyone can read a JWT payload; only the signature proves who issued it, so always verify on your server.
Related converters
Base64URL DecoderDecode URL-safe Base64 (with - and _, padding optional) such as JWT segments back to UTF-8 text.JSON FormatterBeautify and pretty-print JSON with 2-space, 4-space or tab indentation, with optional key sorting.User Agent ParserIdentify the browser, rendering engine, operating system and device type from a User-Agent string.URL ParserSplit a URL into protocol, host, port, path, query parameters and fragment, with percent-encoding decoded.Query String to JSON ConverterConvert a URL query string to JSON. Repeated keys become arrays and bracket keys like user[name] become nested objects.Regex TesterTest JavaScript regular expressions live with highlighted matches, a capture group table and a replace preview.JSONPath TesterEvaluate JSONPath expressions such as $..price or $.items[?(@.qty > 1)] against JSON and see the matched values or paths.HTTP Header ParserParse raw HTTP request or response headers into JSON. Repeated headers such as Set-Cookie become arrays.