AdminForge Star on GitHub

JWT decoder

In browser

Decode a JSON Web Token's header and claims without sending it anywhere

Input

Paste the whole token, including the signature.

This tool runs entirely in your browser. Nothing you type is sent to the server, so it is safe for tokens, keys and passwords — and it keeps working with the network unplugged.

Fill in the form and run the tool. Results appear here.

Decoding is not verifying. This tool reads what the token says; it does not check the signature, so never trust a decoded claim as proof of anything. Expiry and not-before times are compared against your browser's clock, so a wrong local clock will make a valid token look expired.