Developer tools
JWT decoder
Decode a JWT header and payload locally. Signature is not verified — for inspection only.
This tool does not verify signatures — never paste production secrets you must keep confidential.
Your data never leaves the browser.
How it works
- Paste a JWT into the field.
- Header and payload appear as formatted JSON.
- Copy either part or check the exp timestamp.
FAQ
- Does this verify the signature?
- No. It only base64url-decodes header and payload for inspection.
- Is the token sent to a server?
- No. Decoding runs entirely in your browser.