JWT Decoder
Decode a JWT header and payload to inspect claims and expiration; the signature is not verified.
0 chars
Paste the complete token. The signature is not decoded.
The result will appear here…Enter text to update the result automatically.
Online JWT decoder
Decode a JWT header and payload from Base64URL into JSON to inspect claims, issue time, and expiration. This only displays the token contents: it does not verify the signature or prove that the token is trusted.
Does decoding a JWT verify that it is authentic?
No. Decoding only reveals the visible header and payload. Signature verification requires a trusted key and explicit algorithm and validation rules. Treat tokens as sensitive data.