A LITTLE HELP WITH YOUR NEXT TASK

JWT decoder

Inspect the JSON header and payload of a three-part JWT locally, with an explicit unverified-signature warning.

Your workspace Runs in your browser

Your result goes here.

Add your input and run the tool.
We’ll keep the result separate.

Inputs stay in this browser. Nothing you enter is included in analytics.

A LITTLE KNOW-HOW

How to use jwt decoder

  1. Paste text into the editor. Inputs are limited to one million characters.
  2. Choose an operation where available, then run the tool.
  3. Review the result, copy it or save a text file.

A simple example

A Base64URL JSON header and payload are decoded into separate fields. Claims are displayed as supplied.

What to keep in mind

No signature verification, login validation, key lookup, expiry validation or JWE decryption. Unsafe numeric values and nesting beyond 100 levels are rejected. Do not trust decoded claims for access decisions. Sensitive tokens stay in this browser.

Good questions. Clear answers.

Does my text leave the device?

No. This tool processes text in your browser and does not retain it.

Can I undo a change?

Your original input stays in the input editor. The result appears separately.

WHILE YOU’RE HERE

A few more useful tools.

All tools