JWT Decoder & DebuggerSecurity

Safely decode, inspect claims, check expiration, and verify signatures for JSON Web Tokens locally in your browser.

Local-first

Encoded JSON Web Token (Header.Payload.Signature)

0 chars

Drop file or paste text

Decoded claims will appear here

Paste a JWT on the left to inspect the header, payload, and standard claims.

Accepts:

JWT Token string (Header.Payload.Signature)

Outputs:

Decoded JSON Header & Claims payload

Client-side Base64URL parsing with expiration check

How this tool works

What it accepts, how to use it, and where your input is processed.

Show Guide

JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. Our tool allows you to instantly decode the header and payload sections to inspect their contents.

Security Warning:

JWTs are encoded, NOT encrypted. Never include sensitive data like passwords or credit card numbers in a JWT payload, as anyone who possesses the token can decode it.

Need an extra feature or found an edge case?Send Feedback