Back to toolbox
JWT decoder
Read the header, payload and claims of a JSON Web Token, with the registered claims explained and expiry checked against the clock. Decoding only: the signature is not verified, so a decoded token proves nothing about who issued it.
Decoding happens in your browser. The token is never uploaded, stored or logged, which matters here more than on most of these tools: a JWT is usually a live credential.