← Developer Tools
š
JWT Decoder
Paste any JWT token to instantly decode and inspect the header, payload, and claims. Check expiration, algorithm, issued-at time, and all other fields. Free, runs in your browser.
JWT Token
JWT Decoder — FAQs
What is a JWT token?
JWT (JSON Web Token) is a compact, URL-safe token format used for authentication and information exchange. It consists of three base64-encoded parts: Header (algorithm), Payload (claims), and Signature — separated by dots.
Is it safe to decode a JWT here?
Yes — decoding happens entirely in your browser using JavaScript. The token is never sent to any server. Note: JWT payloads are base64-encoded, not encrypted, so anyone with the token can read the claims. Never put sensitive data in JWT payloads.
What common JWT claims mean
sub = Subject (user ID), iat = Issued At (Unix timestamp), exp = Expiration time, aud = Audience, iss = Issuer, nbf = Not Before. All timestamps are Unix epoch seconds.
Can this tool verify JWT signatures?
No — signature verification requires the secret key or public key that only your server should have. This tool decodes and displays the claims, but cannot validate that the signature is authentic without the key.