JWT Decoder
Decode a JSON Web Token header and payload locally without sending the token anywhere.
Decode only. This tool does not verify the token signature.
How to use JWT Decoder
Paste a three-part JWT and select Decode JWT. ToolHyv Base64URL-decodes the header and payload and formats JSON when possible.
Privacy
The JWT stays in your browser. This is especially important because JWT payloads can contain sensitive claims.
Frequently asked questions
Does this verify the JWT signature?
No. Decoding is not verification. Trust a token only after your application verifies its signature, issuer, audience and other required claims.
Can I decode an expired token?
Yes. Expiration affects whether a token should be accepted, not whether its payload can be decoded.