SECURITY

JWT Decoder

Take a peek inside a JWT header and payload. No token uploads.

YOUR WORKSPACE
INPUT
Your input stays in this tab · Up to 500,000 characters

A little clarity, coming right up.

Your result will appear here.
A clean result. No extra steps.
Processed here. Never uploaded.
Tip: Ctrl + Enter or ⌘ + Enter to run.
THE QUICK START

One less thing on your list.

  1. 01

    Paste a three-part JWT.

  2. 02

    Decode its header and payload.

  3. 03

    Inspect claims, remembering the signature has not been verified.

A LITTLE CONTEXT

About this tool

Inspect the JSON header and payload of a compact JSON Web Token. The token stays in this tab and is not sent to a verification service.

Decoding does not verify a signature, authenticity, expiration, or authorization. Encrypted five-part JWE tokens are not supported. Never trust claims solely because they decode.

GOOD TO KNOW

A couple of useful answers.

Does this verify my token?+

No. Verification requires the appropriate trusted key and algorithm checks, which this decoder does not perform.

Will you store the token?+

No. Tool input is held in memory in the current page and is not intentionally persisted.

This tool runs in your browser. Your input is not uploaded or saved by Saanvi.

Privacy details