JWT Decoder

Decode a JSON Web Token's header and payload instantly, entirely in your browser.

This only decodes the header/payload (Base64, not encrypted) — it does not verify the signature.

Header

—

Payload

—

Questions answered

Frequently asked questions

Everything you might be wondering about the JWT Decoder.

Does this verify the JWT signature?

No — it only decodes the header and payload (which are just Base64-encoded, not encrypted). Signature verification requires the secret/public key, which this tool never asks for.

Is my token sent anywhere?

No — decoding happens entirely in your browser. Never paste a production token into any tool you don't fully trust, including this one — always verify it runs client-side.

Is it free and private?

Yes — free, no sign-up, and everything runs in your browser.

More free tools