JWT Decoder

To decode a JWT, paste the token: the header and payload are Base64URL-decoded and shown as JSON, with iat, nbf and exp turned into readable dates and a clear expired / not expired status. You can also verify HS256 signatures with a secret.

Read the guide

Free
No signup
Runs in your browser

JWT

No expiry (exp) claim

Header · HS256

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022
}

Claim	Meaning	Value
sub	Subject	1234567890
name	Custom	John Doe
iat	Issued at	1516239022 → Thu, 18 Jan 2018 01:30:22 GMT

Verify HS256 signature with secret

Loading tool…

How to use JWT Decoder

1Type or paste your input into the JWT Decoder.
2Choose any options you need.
3See the result update instantly.
4Copy the result or download it.

JWT Decoder: questions people ask

Is it safe to paste a production token?

Decoding happens in your browser and nothing is sent anywhere. Still, treat live tokens like passwords and revoke any you share.

Does decoding verify the token?

No. Anyone can read a JWT's payload. Only signature verification with the key proves it was not tampered with.

Is my data uploaded when I use the JWT Decoder?

No. The JWT Decoder runs entirely in your web browser, so your text and numbers stay on your device and work even on a slow connection.

Does the JWT Decoder work on iPhone, Android and Mac?

Yes. The JWT Decoder runs in any modern browser (Safari, Chrome, Edge or Firefox) on iPhone, iPad, Android phones, Mac, Windows and Chromebook. There is no app to install.

Is the JWT Decoder free?

Yes. The JWT Decoder is free with no signup, no watermark and no daily limit.