Developer tool · Free · Browser based
Decode JWT headers and payloads, inspect claims, and check expiration times privately in your browser.
Avoid sharing live credentials. Decoding does not verify the signature.
Edit and sign
Enter the signing key to unlock the decoded JSON. The detected algorithm is selected automatically, and you may change it before generating.
The key remains in browser memory only and is cleared when this page reloads.
The signature is displayed for inspection only. Editing claims requires a signing key and creates a new signature.
About this tool
Decode a JSON Web Token into its header, payload, and signature components. Inspect standard claims such as issuer, subject, audience, issued time, and expiration without sending the token to a server.
Decoding shows what a token contains, but it does not verify that the signature is valid or that the token can be trusted.