Developer tool
JWT Decoder
Read the header and payload of a JWT. The signature stays unverified.
Processed in your browser. The text is not sent to our servers.
How to decode a JWT
- Paste the token, including the dots.
- Click Decode token.
- Read the header and payload. Copy them if you need to inspect a claim.
Decoding only reads the header and payload. The signature is not checked, so a decoded token is not proof that it is genuine.
Frequently asked questions
Does this verify the signature?
No. It shows whether a signature segment is present and does not check it against a secret or key.
Is the token uploaded?
No. Decoding runs in your browser. Avoid pasting tokens you cannot afford to leave in a browser tab.