JWT Decoder
Decode JSON Web Tokens securely in your browser
JWT Token
Header
// Header will appear here
Payload
// Payload will appear here
Frequently asked questions
Is it safe to decode JWTs in a browser tool?
Yes, our decoder runs entirely in your browser. No data is sent to any server. However, never paste production tokens with sensitive data into any online tool you don't trust.
Can this tool verify JWT signatures?
We decode and display the signature, but verification requires the secret key or public key. Never expose your signing keys—verify signatures on your secure backend.
What do the 'iat' and 'exp' claims mean?
'iat' (issued at) is when the token was created. 'exp' (expiration) is when it expires. Both are Unix timestamps. Our decoder converts these to readable dates automatically.