Developer toolLiveRuns on your device
JWT Decoder
Paste a JSON Web Token to see its header and payload as formatted JSON, with issued-at and expiry times in your time zone. Optionally verify an HMAC signature with your secret — all locally.
How to use
JWT Decoder in three steps
- 01
Paste a JWT.
- 02
Read the decoded header, payload and expiry.
- 03
Optionally enter the secret to verify the signature.
FAQ
Good to know
Decoding happens entirely in this tab — the token is never sent anywhere. Still, treat live tokens like passwords.
HS256, HS384 and HS512 with a shared secret. Tokens signed with RS or ES keys are decoded, but their signatures aren't checked.
Related
More developer tools
- Live
JSON Formatter
Format, validate and minify JSON — with exact error positions.
Developer - Live
Base64 Encode / Decode
Encode text or files to Base64, and decode it back.
Developer - Live
URL Encode / Decode
Percent-encode text for URLs, or decode it back.
Developer - Live
UUID Generator
Generate random v4 UUIDs — one or a hundred at a time.
Developer