JWT

JWT decoder

Paste a JWT to read the header and payload. Useful for debugging login tokens. The signature is not checked.

Decode a token

What you see

The tool splits the token, Base64-decodes the first two parts, and shows them as JSON. Expiry and issued-at claims are easier to read this way.

Safety

Do not paste a production secret or a live access token you cannot rotate. Decoding happens locally, but the token still grants access if someone else has it.

Questions

Does this verify the signature?

No. It only reads the token. Verification needs the secret or public key on a server.

Why is my token invalid?

A JWT has three parts separated by dots. If a part is missing or not Base64, the decoder cannot read it.