JWT Decoder

Inspect the header and payload of a JSON Web Token, decoded locally.

Your token

Status: —

—

—

—

Decoding only proves what a token claims; the signature is not verified here.

Paste the JSON Web Token you want to inspect.
Read the decoded header and payload shown below.
Check the status line for the number of claims and whether a signature is present.

Common questions about the free online jwt decoder.

A JWT is a compact string with three dot separated parts: a header, a payload of claims, and a signature. It is commonly used for authentication.

The decoding happens entirely in your browser and nothing is transmitted. Even so, avoid pasting production tokens into any online tool if you can.

No. It only decodes the parts so you can read them. Verifying requires the secret or public key and is done by your server.

Only if the signature verifies. Until then the payload is just data the token claims, and anyone can craft one.

Standard claims such as iat, exp and nbf are Unix timestamps in seconds. You can convert them with the timestamp converter.

A JWT with the algorithm set to none has no signature part, which means it provides no integrity protection.

Yes. The decoder is fully responsive and works on desktop, tablet and phone.

Yes, it is completely free with no account required.

Last updated: October 10, 2026