Utilities

JWT Decoded token

Decode JSON Web Tokens locally in your browser without storing them.

This tool only decodes. It does not verify the signature.

ExpiresJanuary 1, 2030 at 1:00:00 AM
Issued atNovember 14, 2023 at 11:13:20 PM
Time until expiryin 1,260 days
StatusNot expired

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Astroworld",
  "iat": 1700000000,
  "exp": 1893456000
}
signature

About JWT Decoder

Paste a JSON Web Token to decode its header and payload into readable JSON. Verifies the signature against a public key or shared secret if you paste one. Nothing is sent to a server, so it's safe for production tokens.

Frequently asked questions

Is decoding a JWT the same as verifying it?

No. Decoding only reveals the contents. Verification checks the signature against the issuer's key and is the only thing that proves the token wasn't tampered with.

Can I decode an encrypted JWE?

Not without the decryption key, which never leaves your client. This tool only handles signed (JWS) tokens.