Developer Tools
JWT header and payload decoder
Inspect a token's header and payload locally without validating its signature.
JavaScript is required to run the interactive tool. Open the tool separately if it does not load in the frame.
How to use it
Paste a three-part JWT and press Run. Treat all decoded claims as untrusted.
Example
A JWT payload with a subject claim is shown as JSON.
Frequently asked question
Can I trust the displayed claims?
No. Anyone can create an unsigned or forged payload; verify tokens in a trusted system.
Limits and privacy
A decoded token is not authenticated. This tool never verifies a signature or expiry.
Tool input is processed in a separate browser environment without advertising or analytics scripts. This page does not upload it to the service.