Those Boring Tools
Developer ToolsPrivate by design

JWT Decoder

Paste a JWT to decode its header and payload as readable JSON. This tool only decodes — it does not verify the signature.

How to use this tool

  1. 1Paste a JWT into the input box.
  2. 2The decoded header and payload appear automatically, pretty-printed as JSON.
  3. 3Standard claims like exp and iat are shown with human-readable dates.

Frequently asked questions

Does this verify the JWT signature?+

No. This tool only decodes the header and payload, which are Base64URL-encoded but not encrypted. It does not check whether the signature is valid.

Is it safe to paste a production JWT here?+

Decoding happens entirely in your browser and nothing is transmitted, but as a general rule avoid pasting live production tokens into any third-party tool.

Why do I see gibberish instead of a decoded token?+

Make sure you're pasting the full token including all three dot-separated parts (header.payload.signature).

Keep the boring tools boring.

If this saved you five minutes of nonsense, you can help keep the free tools running.

Buy the toolbox a coffee