JWT decoder
Read a JSON Web Token without checking its signature.
Decode a JWT header and payload in the browser. The signature is not verified and the token is not sent anywhere.
This stays in your browser. Nothing you type or drop here is sent to a server.
The signature is not checked. This page only decodes the header and payload. Do not treat the claims as verified.
How to use this calculator
- Paste the token. It needs three dot-separated parts.
- Read the header and payload. An exp claim is shown as UTC only as a clock reading.
- Do not treat the claims as authenticated.
Questions
JWT decoder: is the input uploaded?
No. The page reads and writes only in this browser. There is no account and no server round trip.
What should I check before trusting the result?
Decode a JWT header and payload in the browser. The signature is not verified and the token is not sent anywhere.