JWT Decoder & Parser
Decode JSON Web Tokens and view their contents. Header and Payload are displayed instantly. All processing, including signature verification, is done entirely in the browser for security.
How to use
About this tool
Decodes JWT header, payload, and signature from Base64 and displays claims. Does not verify signatures.
How to use
Paste a JWT string or load from file. It is decoded automatically; header, payload, claim classification, and validation are shown.
Options
Input: Paste in the text field or load from file (.txt, .jwt, etc.). After input, decode runs automatically; header, payload, signature, claim classification, and exp validation are shown.
Use cases
β’ Inspecting OAuth2/OIDC id_token β’ Debugging claims β’ Checking exp β’ Viewing custom claims
Code Examples
1// Decode header and payload from Base64URL
2const [headerB64, payloadB64] = jwt.split('.');
3const payload = JSON.parse(
4 atob(payloadB64.replace(/-/g, '+').replace(/_/g, '/'))
5);1import jwt # PyJWT
2
3decoded = jwt.decode(
4 token,
5 options={"verify_signature": False}
6)1use Firebase\JWT\JWT;
2
3$decoded = JWT::decode($token, $keys, ['RS256']);
4// Without verify: decode Base64URL manuallyHow it works
JWT is split into xxx.yyy.zzz; each part is Base64URL-decoded and shown as JSON. Signature verification is not performed (requires the secret key).
Privacy and data
Decoding is done entirely in the browser; the JWT is never sent to a server. Tokens are only handled in memory and are not stored.