JWT decoder
Decode JWT headers and claims without sending a token anywhere.
Bookmark this page
Keep this page handy for next time.
- On a computer
- Press Ctrl + D, or Command + D on a Mac.
- On a phone or tablet
- Open your browser's menu or Share menu and look for Add Bookmark, Bookmark or Add to favourites.
A bookmark saves the page link. Save any tool results separately.
How to use this tool
- Paste a three-part compact JWT.
- Decode its header and payload as JSON.
- Read the explicit unverified status: decoding does not prove authenticity or authorisation.
Things to know
- Signatures are not verified. Never trust decoded claims merely because parsing succeeded. Encrypted JWE tokens are not supported.
- Each text input accepts up to 5 MiB. Output is limited to 25 MiB and combined text settings to 1 MiB.
You might also need
More in encoding & generatorsCaesar cipher decoder and encoder
Encode or decode a Caesar shift, apply ROT13, or inspect every possible letter shift for a puzzle.
URL percent encoder and decoder
Encode or decode URL components and HTML form query values.
Product key generator
Create random product keys and licence codes with custom groups, separators and prefixes.
Morse code translator
Translate text to International Morse code or decode dots and dashes, with an optional playable WAV download.
HMAC generator
Generate an HMAC for a message with a UTF-8 or hexadecimal secret key.
TOTP generator
Calculate a time-based one-time password from a Base32 shared secret.
Base64 converter
Encode UTF-8 text or decode strict Base64 and URL-safe Base64.
Binary text translator
Translate text to UTF-8 binary or hexadecimal bytes, and decode valid byte sequences back into text.
Character-encoding converter
Decode Base64 bytes using a character encoding or encode text into downloadable bytes.