JWT Decoder

Decode JWT header + payload for inspection. Runs entirely client-side.

Decoding only — this tool does not verify the signature. Never paste a real production JWT into any online decoder.

About this tool

Splits your JWT on the two dots into header, payload, and signature, then base64url-decodes header and payload as JSON. Does NOT verify the signature (that would require the issuer public key, which you would not want to paste into any online tool). Never paste real production JWTs into any online decoder including this one — they contain valid identity credentials.