Decode a JSON Web Token to read its header and payload without any server round trip. A JWT is three Base64url segments separated by dots: a header describing the algorithm, a payload of claims and a signature. This decoder splits the token, Base64url-decodes the first two parts and pretty-prints them as JSON so you can inspect the issuer, subject, scopes and expiry while debugging auth. It also translates the exp and iat timestamps into readable dates so you can see at a glance whether a token is expired. Note that this tool does not verify the signature, since that requires the secret or public key; it is a decoder for inspection. Everything runs locally, so your tokens never leave the browser.
It splits the token on its two dots and Base64url-decodes the header and payload so you can read the algorithm, claims and any custom fields.
No. It only decodes the token to inspect its contents. Decoding does not check whether the signature is valid, so do not trust an unverified token.
Time claims like exp and iat are converted from Unix timestamps into human-readable dates so you can see when a token expires.
Decode a JSON Web Token to read its header and payload without any server round trip. A JWT is three Base64url segments separated by dots: a header describing the algorithm, a payload of claims and a signature.
Yes. JWT Decoder is completely free, with no sign-up and no usage limits.
Yes. JWT Decoder runs in any modern web browser. There is nothing to download or install.
Yes. JWT Decoder runs entirely on your device in your browser, so nothing you enter is uploaded to a server.
Link this tool from a README, doc or site. The badge links back to this page.
[](https://yourhack.ai/jwt-decoder)