Loading tool…
Setting up your workspace on this device.
Decode JWTs, check expiry and verify HMAC signatures.
Loading tool…
Setting up your workspace on this device.
Advertisement
JWT Decoder shows the header and payload of a JSON Web Token, converts time claims like exp and iat into readable dates, and tells you whether the token has expired. For HS256, HS384 and HS512 tokens you can verify the signature with the shared secret. Decoding happens entirely in your browser — important, because pasting live tokens into online decoders that log requests can leak access.
Open JWT Decoder
Launch JWT Decoder directly in your browser — there is nothing to download, install, or configure first.
Paste your input
Paste or type your input into JWT Decoder to begin.
Get the formatted output
JWT Decoder processes your input instantly in the browser and shows the result, ready to copy.
Yes. The token is decoded locally and never sent anywhere. Still, treat tokens like passwords and avoid sharing them.
Not yet — signature checking supports the HMAC algorithms HS256, HS384 and HS512. Header and payload decoding works for every algorithm.
Yes. JWT Decoder is completely free, with no account, no paywall, and no usage limits.
No. JWT Decoder works instantly in any modern web browser — there is no software to install, no extension, and no sign-up.