JWT Decoder

Decode and inspect JSON Web Tokens (JWT). View the header, payload, and signature parts of any JWT token. Note: This tool does not verify signatures.

0 chars0 bytes

Header

Payload

Signature

What is JWT?

JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. JWTs are commonly used for authentication and authorization.

JWT Structure

  • Header - Contains token type and signing algorithm
  • Payload - Contains claims (user data, expiration, etc.)
  • Signature - Verifies the token hasn't been tampered with

Common Claims

  • iss - Issuer of the token
  • sub - Subject (usually user ID)
  • exp - Expiration time
  • iat - Issued at time
  • aud - Audience

Security Note

This tool only decodes JWTs - it does not verify signatures. Never trust JWT data without proper server-side verification.

Keyboard Shortcuts

  • Ctrl + L - Focus input field
  • Ctrl + Enter - Decode JWT
  • Ctrl + Shift + C - Copy payload
  • Ctrl + S - Download decoded
  • Escape - Clear all inputs
  • Tab - Insert 2 spaces in input
  • Double-click output area - Select all text