JWT decoder
Read a JWT’s JSON header and payload locally without sending the token elsewhere.
Paste a three-part compact JWT. This tool decodes content: it does NOT verify the signature and does NOT authenticate the token.
Result
Enter your data and run the tool. Your result will appear here.
Data is processed only on this page and is not sent to the server. Reloading or navigating away clears it.
Aggregate statistics: we count uses without storing inputs, files or personal identifiers in the counters. Privacy
Method, examples and limits
Header and payload are decoded from base64url as UTF-8 JSON objects. The third part is not verified; exp, iss and aud remain unvalidated claims. Five-part encrypted JWE tokens and non-object JSON are unsupported. The limit is 16,000 characters. Results are shown as text without executing HTML in claims. Never use this output to authorize access.
Reference sources
Frequently asked questions
Does the decoder verify JWT authenticity?
No. It does not verify signature, expiry, issuer or audience. It only displays decoded data.
Is this data saved?
Data is processed only on this page and is not sent to the server. Reloading or navigating away clears it.