utiloralab.
Developer tools / Free online tool

JWT Decoder

Inspect a JWT header and payload locally. No token is sent to a server.

Runs in your browser
0 characters
OUTPUT
Your result will appear here

A little input. A useful output.

Ctrl + Enter to run

Your input stays on your device. No uploads. No account. Just your result.

How to use JWT Decoder

  1. 01

    Paste a three-part JWT.

  2. 02

    Decode its header and payload.

  3. 03

    Verify the signature with the issuer before trusting claims.

A quick example

Try a simple example

INPUT
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMifQ.signature
OUTPUT
Header: HS256; payload: subject 123; signature not verified.

About JWT Decoder

A signed JSON Web Token consists of a header, payload, and signature. Decoding reveals the JSON claims, but it does not establish their authenticity.

When it comes in handy

  • Inspect development tokens.
  • Read token expiry claims.

Why use it here?

  • Runs locally in your browser.
  • No account needed; copy or download your result.

A few things to keep in mind

  • Does not verify signatures.
  • Encrypted JWE tokens are not supported.

Good questions. Simple answers.

Can I trust the decoded claims?

No. Claims are untrusted until the token signature, issuer, audience and lifetime have been validated.

Is my input uploaded?

No. This tool processes your input in your browser. Your input and output are not included in analytics.

A good next step

Useful tools that go well together.

Explore category