How do I decode a JWT token?

Paste your JWT token in the left panel. The decoded header and payload appear instantly. The tool also checks token expiry and verifies the signature structure — all client-side.

A JSON Web Token (JWT) is a compact, URL-safe token format used for authentication and information exchange. It consists of three Base64URL-encoded parts: header, payload, and signature, separated by dots.

Is the JWT decoder free?

Yes, completely free. Decoding runs entirely in your browser — your token is never sent to any server, and no signup is required.

JWT Decoder

Decode JWT tokens instantly online. Inspect header, payload, and signature without verification. Free client-side JWT decoder — your token never leaves the browser.

Open in Encoder ↗

Secret / Public Keyoptional — for signature verification

JWT Token

Decoded JWT

Related Tools

Unix Timestamp

Convert Unix timestamps to UTC, local time, and ISO 8601 instantly. Auto-detects seconds vs milliseconds.

Base Converter

Convert numbers between decimal, hex, binary, and octal instantly. Free and runs in your browser.

Hash Generator

Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes instantly. Runs entirely in your browser using the Web Crypto API.

How to Use the JWT Decoder

Paste your JWT token in the left panel.
The decoded header, payload, and raw signature appear on the right.
Expiry time (exp) and issued-at (iat) are shown as Unix timestamps.
Click "Copy Output" to copy the decoded JSON.

Important Notes

Decoding only — the signature is not verified.
Your token never leaves the browser. All decoding happens client-side.
Supports HS256, RS256, ES256, and other standard JWT algorithms.
Do not paste tokens containing sensitive production credentials.