JWT Decoder
Encoded Token
Paste a JWT string here
Invalid JWT format. Must contain 3 base64url encoded parts separated by dots.
Verify Signature
* Client-side verification is currently supported for HMAC (HS256/384/512) algorithms.
Decoded Header
Decoded Payload
Expiration (exp):
Not Before (nbf):
Issued At (iat):
Security Tools
JWT Decoder
Decode and verify JSON Web Tokens (JWT) instantly online. View the header and payload data, verify the cryptographic signature using your secret key, and check if the token has expired.
Private & Secure (100% Client-Side)
Quick Tip
No data is sent to our servers. All JWT decoding and signature verification happens directly in your browser ensuring your tokens and secrets remain safe.
