Does this verify the token's signature?

No. It only decodes the header and payload, which are base64url-encoded, not encrypted — anyone can read them. Verifying a signature requires the signing secret or public key, which this tool never asks for.

Is my token sent anywhere?

No — decoding happens entirely in your browser. Even so, treat tokens as sensitive and avoid pasting production tokens into any tool you don't control.

JWT Decoder

Developer Tools

Decode a JSON Web Token's header and payload to inspect its claims.

JWT

What you can do with this tool

Inspect the claims inside an access token while debugging auth
Check when a token expires

Frequently asked questions

Does this verify the token's signature?: No. It only decodes the header and payload, which are base64url-encoded, not encrypted — anyone can read them. Verifying a signature requires the signing secret or public key, which this tool never asks for.
Is my token sent anywhere?: No — decoding happens entirely in your browser. Even so, treat tokens as sensitive and avoid pasting production tokens into any tool you don't control.

What would you like to do next?

Popular

Base64 Encoder / Decoder

Encode text to Base64 or decode Base64 back to text instantly.

Popular

JSON Formatter & Validator

Format, validate, and minify JSON instantly with clear error messages.

Unix Timestamp Converter

Convert between Unix timestamps and human-readable dates, in any timezone.