JWT Decoder
Decode a JSON Web Token's header and payload, with readable issued/expiry times. The token never leaves your browser.
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Runs entirely in your browser — nothing is uploaded.
Decode a JWT Online
A JSON Web Token (JWT) has three base64url-encoded parts separated by dots: header.payload.signature. Paste a token and this decoder shows the JSON header and payload so you can inspect the claims (sub, name, iat,exp, and any custom fields), along with human-readable timestamps and an expiry check.
Private by design
Decoding runs entirely in your browser — the token is never uploaded or stored. That makes it safe for inspecting tokens during development, though you should still avoid pasting sensitive production credentials into any third-party tool.
Decode vs verify
This tool decodes the token (reads the claims). It does not verify the signature — that requires the signing secret or public key and belongs on your server. For the broader JSON workflow, the full JSON Studio can format, validate, query, and convert the decoded payload.
Other JSON Tools