JWT Decoder

Paste a JSON Web Token to decode its header, payload (claims), and signature.

Your tokens stay in your browser — nothing is uploaded to any server.

or try sample token

What is a JWT?

A JSON Web Token (JWT) is a compact, URL-safe token format used for securely transmitting information between parties. JWTs are widely used for authentication, authorization, and information exchange in web applications and APIs. Each token has three Base64URL-encoded parts: a header, a payload, and a signature.

  • Header — contains the signing algorithm (e.g. HS256, RS256) and token type.
  • Payload — contains the claims (user data, permissions, timestamps).
  • Signature — verifies the token hasn't been tampered with.
  • Expiry detection — automatically shows whether the token is valid or expired.
  • Timestamp conversioniat, exp, and nbf fields are shown as human-readable dates.
  • Privacy-first — all decoding happens in your browser. Your tokens are never sent anywhere.