JWT Decoder
Decode a JWT header and payload locally without verifying its signature.
Inputs stay on your device; no account required.
Supports three-part JSON Web Tokens, up to 50,000 characters. Decoding does not prove authenticity or authorization; encrypted five-part JWE tokens are not supported.
Save this page in your browser bookmarks to use it again.
About this tool
Decode a JWT header and payload locally without verifying its signature. Supports three-part JSON Web Tokens, up to 50,000 characters. Decoding does not prove authenticity or authorization; encrypted five-part JWE tokens are not supported.
How to use
- Paste a three-part JWT into the input field.
- Decode and inspect the header and payload as JSON.
Example
A demo token with {"sub":"demo"} displays its payload; the signature is not verified.
Common question
Does decoding prove that a token is valid?
Supports three-part JSON Web Tokens, up to 50,000 characters. Decoding does not prove authenticity or authorization; encrypted five-part JWE tokens are not supported.