JWT decoder

Inspect a token without trusting its signature.

On your device · No account

Privacy details

JWT decoder processes your input in this browser. Inputs and results are excluded from analytics. Recent tools save tool names, visit counts and last-visit times. Saved tools store only their names. Draft saving is optional and stays on this device; delete saved text with the draft controls. Loading text from a URL is optional and contacts that server; its URL and your IP address are visible to the server. An optional “Use in” action keeps a handoff in this tab. The next tool removes it on arrival and ignores it if more than a minute has passed.

Copy link includes the inputs you choose to share in the address. Anyone with that link can reopen them. Files and generated results are excluded. Password and key tools share settings only.

Your input

Options and local file

Open a text file on this device

Optional settings apply only to this tab.

Your result

Reset reloads the tool with its starting values and releases open files and device controls. Saved drafts stay on this device until you delete them.

Links include your inputs and settings. Anyone with the link can see them, so leave out private text. Files and generated results are left out; random draws run again.

Keyboard shortcuts

Updated 2026-09-20

JWT decoder explained

Decode the header and claims of a three-part JWT as local JSON. The result prominently says the signature has not been checked, because decoding the text does not establish that the token is genuine or authorized.

Next: JSON formatter

A worked example

A payload containing {"sub":"example"} appears as that object after decoding. It remains an untrusted claim until the issuing system validates the signature and token rules.

Before you use the result

No secret or public key is requested, and no signature, issuer, audience or expiry policy is validated. JWE encrypted tokens are not supported. Never use this decoded output as authorization.

Cite this page

Citation style

ToolOctopus. “JWT decoder.” Updated 2026-09-20. https://tooloctopus.com/jwt-decoder.

Add an access date if your instructions require one.

Citation formatting uses citeproc-js by Frank Bennett and Citation Style Language styles. Licence and source code.