JSON Formatter
Validate, prettify, minify or sort JSON keys with clear syntax errors.
Developer toolsDeveloper tools
JWT Decoder
Inspect a JWT header and payload locally. Decoding does not verify signatures or authorize access.
Your result
A little input. A useful result.
Adjust the example inputs, then select Decode JWT.
About this tool
Read the JSON header and claims of a three-part JWT for debugging. The signature is not verified, and the tool does not validate the issuer, audience or expiry. Use test tokens rather than production credentials.
How to use it
- 1
Paste a three-part test JWT.
- 2
Decode its Base64URL header and payload.
- 3
Inspect the claims; use your application’s verifier for security decisions.
Questions, answered
Does a successful decode mean the token is valid?
No. Anyone can create a decodable header and payload. A valid signature, trusted issuer, correct audience and applicable time checks must be verified separately.
Can it decode an encrypted JWE?
No. This tool expects the three segments of a JWT in JWS compact form. Five-part encrypted JWE tokens require decryption with the appropriate key.