When to use jwt decoder
JWTs often contain useful expiry, issuer and audience fields. Split the compact token into its segments and decode its Base64URL JSON to inspect those claims. The output includes both header and payload. Decoding is deliberately separate from authentication: readable claims must not be trusted unless a signature and expected claims are verified by your application.
How it works
- Paste a three-part JWT.
- Decode the header and payload.
- Inspect the JSON and clear the input when finished.
Try this example
eyJhbGciOiJub25lIn0.eyJzdWIiOiJkZW1vIn0.
Before you export or rely on the result
This does not verify signatures, expiry or permissions. Never treat decoded data as proof of identity. Do not share live access tokens in screenshots.
Does this tool upload my input?
No. This tool processes input in your browser. Optional advertisements are separate third-party content and load only when you allow ads. See the privacy notice for hosting logs and advertising details.
Can I use the result without creating an account?
Yes. JWT Decoder is free to use without an account. Review the result against the limits above and the requirements of the app or document where you plan to use it.