Web Dev Helpers
JWT Decoder
Decode JSON Web Tokens - header, payload, and claims - in your browser.
JWT
About this tool
Paste a JWT (header.payload.signature) to see the decoded header and payload, common claims (iss, aud, exp, iat) rendered as dates, and the algorithm in use. The token is parsed locally - nothing is sent over the network. The signature is NOT verified here; this is a decoder, not a validator.
FAQs
Does this verify the signature?
No. Signature verification needs the shared secret (HS256) or public key (RS256/ES256). This tool decodes; it does not validate trust.
Is JWT encrypted?
No - the standard JWT is signed (JWS), not encrypted. Anyone with the token can read its claims. Use JWE if you need encryption.
Are claims like 'exp' converted to dates?
Yes - numeric epoch claims (exp, iat, nbf, auth_time) are shown as human-readable dates in your local timezone.