JWT Decoder
Paste a JSON Web Token to decode its header and payload. Decoding happens in your browser — your token is never sent anywhere.
—
—
Ad space (enabled after AdSense approval)
About JWTs
A JSON Web Token has three parts separated by dots: header, payload and signature. The header and payload are Base64URL-encoded (not encrypted), so anyone can read them — never put secrets in a JWT payload.
Does this verify the signature?
No. This tool only decodes the readable parts. Signature verification requires the secret/public key and should be done server-side.