AZ Tools

JWT Decoder

Developer

Paste a JWT and instantly read its decoded header and payload as formatted JSON. See when the token was issued, when it expires, and the raw signature. Decoding happens locally — your token is never sent to a server. Note that this tool does not verify the signature.

How to use

  1. Paste your JWT into the input box.
  2. The header and payload are decoded and displayed as JSON.
  3. Check the expiration banner to see if the token is still valid.
  4. Copy any section with its Copy button.

Frequently asked questions

Does this verify the signature?
No. JWT verification needs the issuer's secret or public key. This tool only decodes the base64url payload so you can inspect the claims.
Is my token sent anywhere?
No. Decoding runs entirely in your browser; nothing leaves your device.
What formats are supported?
Compact JWS / JWT tokens with three dot-separated parts (header.payload.signature).
Why does it say invalid?
Either the token doesn't have three parts or the header/payload aren't valid base64url-encoded JSON.

Related tools