JWT Decoder
Decode JWT header and payload without verifying signatures.
Signature is not verified — decode only.
About this tool
Opaque JWTs hide claims until you decode them. This free JWT decoder parses header and payload so you can inspect iss, exp, roles, and custom fields while debugging auth. Decoding is local—handy for troubleshooting without pasting production tokens into a random third-party site you do not trust.
How to use
- Paste the JWT string (header.payload.signature).
- Decode to view header and payload JSON.
- Check claims like exp, sub, and roles for your bug.
- Remove tokens from shared screens after debugging.
Frequently asked questions
Decoding shows claims; cryptographic verification needs the correct secret or public key in a trusted verifier. Do not treat decode-only output as proof of authenticity.