devcrate / Encoding / JWT Decoder
Encoding
Decode a JWT without sending it anywhere.
Paste a JWT to see its decoded header and payload claims. This does not verify the signature — it's for inspecting claims during development, not for trusting a token's authenticity.
runs entirely in your browser — nothing is uploaded
ad slot · 336x280 in-content
How to use the jwt decoder
- Paste a JWT (three dot-separated Base64URL sections).
- Click Decode to see the header and payload as readable JSON.
- Note: this tool does not verify the signature — never trust a decoded token's contents without server-side verification.
Standard JWT claim names (RFC 7519)
Claim
Meaning
iss
Issuer — who created and signed the token
sub
Subject — the user or entity the token is about
aud
Audience — who the token is intended for
exp
Expiration time — Unix timestamp after which the token is invalid
nbf
Not before — Unix timestamp before which the token must not be accepted
iat
Issued at — Unix timestamp of when the token was created
jti
JWT ID — a unique identifier for this specific token
Frequently asked questions about the JWT Decoder
Is my data uploaded anywhere when I use the JWT Decoder?
No. The JWT Decoder runs entirely in your browser using JavaScript — nothing you type, paste, or select is sent to any server. You can confirm this yourself by opening your browser's network tab while using it.
Is the JWT Decoder really free, and do I need an account?
Yes — the JWT Decoder is completely free, with no account, sign-up, or usage limit.
Does it work on mobile and in any browser?
The JWT Decoder works in any modern browser — Chrome, Firefox, Safari, or Edge — on desktop or mobile, since it's built with standard HTML, CSS, and JavaScript with no special requirements.