Back to Data Tools

JWT Decoder

Inspect JSON Web Tokens locally. Header and payload are decoded; the signature is not verified. Tokens never leave your browser.

How to Use2 Quick Steps & Important Notes

How to Use

  1. Paste a JWT (with or without a Bearer prefix).
  2. Inspect the decoded header, payload, and claims.

What to Expect

  • The signature is not verified - use this to inspect tokens only.
  • Never paste production secrets into tools you do not trust; here everything stays local.
alg: HS256

Signature is not verified - anyone can forge a JWT. Use this to inspect tokens only.

Expires: 2033-05-18T03:33:19.000Z · local 5/18/2033, 3:33:19 AM

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022,
  "exp": 1999999999
}

Claims

exp

1999999999

2033-05-18T03:33:19.000Z · local 5/18/2033, 3:33:19 AM

iat

1516239022

2018-01-18T01:30:22.000Z · local 1/18/2018, 1:30:22 AM

name

John Doe

sub

1234567890

Signature (raw)

SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c