Ad Slot
JWT Decoder
Decode and inspect JSON Web Token headers and payloads.
Ad Slot
Ad Slot
Frequently asked questions
Does this verify the token's signature?
No — it only decodes the header and payload, which are just Base64-encoded JSON, not encrypted. Verifying the signature requires the secret or public key the token was signed with, which this tool never has access to.
Is it safe to paste a real JWT here?
Decoding happens entirely in your browser — the token is never sent anywhere. That said, treat access tokens as sensitive regardless of where you paste them, since anyone who has the raw token can already read its payload without any tool.
Why can I read the payload without a password?
Because a JWT isn't encrypted — it's signed. Signing proves the payload hasn't been tampered with; it doesn't hide the contents, which is why JWTs shouldn't carry secrets like passwords in their payload.
Ad Slot
Related tools
Ad Slot