Home / JWT Decoder
JWT Decoder
Decode a JWT header and payload in your browser. This tool does NOT verify the signature.
Important: This decoder does NOT verify the JWT signature. Decoding is not verification — a token can be decoded even if it is forged, tampered with, or expired. Always verify signatures on your server before trusting a token. Your token is decoded locally and never sent to a server.
Your result will appear here.
How to use
- Paste a JWT (three parts separated by dots).
- Header and payload are decoded and shown as JSON.
Frequently asked questions
Does this verify the signature?
No. Decoding is not verification. A decoded token can still be forged or expired; always verify signatures on your server.
Is my token sent anywhere?
No. It is decoded locally and never leaves your browser.
Looking for another tool? Browse all developer tools.