Tool Lockers
Developer utilities

Developer utility

JWT Decoder

Decode the header and payload of a JSON Web Token in your browser. Decoding does not verify the signature or establish that a token is trustworthy.

This tool only decodes token contents. Never treat decoded claims as verified.

Practical guide

Using the JWT Decoder

Inspect a token's header and claims locally.

Example

Input

Paste a three-part token: header.payload.signature

Expected result

Decoded JSON header and payload; the signature is not verified.

Supported inputs

  • A three-part, Base64URL-encoded JSON Web Token.

Limitations

  • Decoding does not verify the signature, issuer, audience, or expiry.
  • Treat claims as untrusted input and never share live production tokens.

Frequently asked questions

Does a decoded token prove that it is valid?

No. Anyone can decode the header and payload. The signature must be verified with the correct key and validation rules.

Is the signature shown or checked?

No. The tool displays the header and payload only; it does not verify the signature.