JWT Decoder

Decode JSON Web Tokens in your browser. Read the header and payload, see expiry and issue times in plain language, and verify HS256, RS256 and ES256 signatures.

  • Free, no sign-up
  • Runs in your browser
  • Your data stays private

How to use the JWT Decoder

  1. Paste the token.
  2. Optionally add the secret or public key to verify the signature.
  3. Read the decoded header, payload and claim times.

Why use this JWT Decoder

  • Readable claimsexp, nbf and iat are shown as dates with relative times such as "in 3 days".
  • Signature checksVerify HS256, HS384, HS512, RS256, ES256 and PS256 with a secret or PEM public key.
  • Status at a glanceShows whether the token is expired, not yet valid or still active.
  • PrivateDecoding and verification happen locally using your browser’s crypto.

Frequently asked questions

Is it safe to paste my JWT here?

The token never leaves your browser. Still, avoid sharing live production tokens anywhere.

Can anyone read a JWT payload?

Yes. The payload is only Base64 encoded, not encrypted, so do not store secrets in it.

How do I verify the signature?

Add the HMAC secret or the PEM public key in the second box and the tool reports whether it matches.

Related tools

More Developer Tools

User Reviews

–
No ratings yet
Write a review
Your rating *

Your email is never published. Reviews are moderated, and links aren't allowed.

What users are saying

No reviews yet

Be the first to share your experience with this tool — your feedback helps others.