Skip to main content

JWT Decoder & DebuggerSecurity

Safely decode, inspect claims, check expiration, and verify signatures for JSON Web Tokens locally in your browser.
0 chars

Decoded claims will appear here

Paste a JWT on the left to inspect the header, payload, and standard claims.

Accepts:
JWT Token string (Header.Payload.Signature)
Outputs:
Decoded JSON Header & Claims payload

Capabilities & How-To Guide

Instructions, supported options, and client-side privacy guarantee.

JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. Our tool allows you to instantly decode the header and payload sections to inspect their contents.

Security Warning:

JWTs are encoded, NOT encrypted. Never include sensitive data like passwords or credit card numbers in a JWT payload, as anyone who possesses the token can decode it.

Need an extra feature or found an edge case?Send Feedback