JWT Decoder_

Decode JSON Web Tokens without sending secrets anywhere. Runs entirely in your browser — nothing you paste here is uploaded or logged.

local://toolkit.codes/encoders-decoders/jwt-decoder
Signature is displayed, not verified
UTF-8
Ready
100% LOCAL

About this JWT decoder

A JSON Web Token is three Base64URL segments — header, payload, signature — joined by dots. This tool decodes the header and payload so you can inspect the algorithm, claims, and expiry (exp, iat, nbf are also shown as readable dates). A leading Bearer  prefix is stripped automatically.

Decoding happens entirely in your browser, which is exactly how you want to inspect production tokens: the token never leaves this tab. Note that decoding is not verification — this tool does not check the signature.