JWT Decoder
Decode a JWT's header and payload, inspect the algorithm and expiry countdown (no signature verification).
Waiting for input…
Decode-only — no signature verification (that requires the server secret). Tokens are processed locally; never paste production secrets on untrusted devices.
How to use
Paste a JWT to decode instantly. Decode-only — signature verification requires the server secret. Tokens are processed locally; avoid pasting production secrets anywhere untrusted.