Developer Tools / JWT Decoder
Guide
How to use the JWT Decoder
- 1
Paste the token.
- 2
Read the header and claims.
- 3
Check the expiry time.
Expert tip
What you should know
JWT payloads are only Base64-encoded, not encrypted: anyone holding the token can read them, so never put sensitive data in claims.
FAQ
Frequently asked questions
Does it verify the signature?+
No. Decoding only reads the token; verification needs the secret or public key on your server.
You might also like
More Developer Tools tools →Regex Generator & Explainer
Describe the pattern in words; get a tested regular expression.
SQL Query Generator
Plain-English questions to correct SQL for your schema.
JSON Formatter & Validator
Pretty-print, minify and validate JSON in your browser.
Code Explainer
Paste code; get a plain-English walkthrough of what it does.
Code Debugger
Paste the error and the code; get the cause and a fix.
Cron Expression Generator
Describe a schedule; get the cron expression and next run times.
Base64 Encode / Decode
Encode text to Base64 or decode it back, UTF-8 safe.
URL Encode / Decode
Percent-encode text for URLs, or decode it back.