Free · no signup · browser-local
JWT Header and Payload Decoder with Unverified Claims
Decode a compact JWT locally and inspect header, payload and NumericDate fields. The displayed claims and signature remain unverified.
Result
UNVERIFIEDChoose inputs and run the tool to see the result.
Getting started
Paste a three-part compact JWT and decode it locally. Read the UNVERIFIED label before using any displayed claim.
Before you use the result
Decoding does not verify the signature, issuer, audience or any claim. Displayed expiration is only the untrusted payload compared with your device clock. Encrypted JWE is unsupported.
Try an example
Decode the public demo token to see a Unicode name and an expiration date; the signature remains UNVERIFIED.
How it works
Strictly decode bounded canonical base64url as UTF-8 JSON objects and inspect numeric exp, nbf and iat timestamps. Tokens are not stored or added to the URL.
Frequently asked questions
Inspect a JWT header, payload and NumericDate fields without sending the token to a server.
How do I use JWT Decoder?
Paste a three-part compact JWT and decode it locally. Read the UNVERIFIED label before using any displayed claim.
Does this tool upload my data?
Inputs and files are processed in your browser. Page-view analytics do not contain your tool input.
What should I check before using the result?
Decoding does not verify the signature, issuer, audience or any claim. Displayed expiration is only the untrusted payload compared with your device clock. Encrypted JWE is unsupported.