Skip to content
HandyBrowserTools

JWT Decoder

Paste a JSON Web Token below to see its decoded header and payload, plus a plain-English readout of the expiry (exp), issued-at (iat) and not-before (nbf) claims.

Private by default: processing stays on your device

Example payload

Input

eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0IiwibmFtZSI6IkFkYSJ9.sig

Output

{
  "sub": "1234",
  "name": "Ada"
}
Share this page X LinkedIn Reddit

These buttons share the page link, not your input.

Frequently asked questions

Is it safe to paste a real token here?

The token is decoded entirely in your browser and never transmitted. Still, treat production tokens as secrets; prefer expired or test tokens when possible.

Does this tool verify the signature?

No, it decodes and displays the token contents. Signature verification requires the signing secret or public key and should happen on your server.

Why does my token fail to decode?

A JWT must be three Base64URL segments separated by dots. Check you copied the whole token without wrapping quotes or a 'Bearer ' prefix (the tool strips 'Bearer ' automatically).

Base64 Encode / Decode

Free online Base64 encoder and decoder. Unicode-safe, supports URL-safe Base64, and runs 100% in your browser. Nothing is ever uploaded.

JSON Formatter

Format, beautify and validate JSON instantly in your browser. Free online JSON formatter with 2/4-space and tab indentation, no signup, 100% client-side.

Hash Generator

Generate MD5, SHA-1, SHA-256 and SHA-512 hashes from text online. Instant, free, and 100% client-side; your input never leaves your browser.