JWT Decoder

Developer Tools

Decode JWT header, payload & expiry

FreePrivateInstant
Add a file · .txt .md .csv .json … · up to 2.00 MB
Full guide, 3 min readInside a JWT: three parts, two dots, and why decoding is not the same as trustingRead the story behind this tool →
Embed this tool on your websiteFree
  1. Choose how tall the frame should be.
  2. Press Copy code.
  3. Paste it into your page, blog, WordPress or Notion HTML block.
Height
Live previewAll embeddable tools

The tool runs inside your visitor's browser, nothing is uploaded, and a small "Powered by ToolCloak" line stays under it. The second line (script) is optional: it makes the frame fit the tool's height.

Similar tools you may like

JWT Signature VerifierVerify HS256, RS256 and ES256 JWT signatures
JWT Generator (HS256)Create signed JWTs for testing APIs
URL DecoderDecode %20 style URL text to readable form
Base32 Encoder & DecoderEncode and decode Base32 text
Base58 Encoder & DecoderEncode and decode Base58 (Bitcoin alphabet)
HTML Entity Encoder & DecoderEncode and decode HTML entities

History

All history →

JWT Decoder — at a glance

Look inside a JWT to see who it belongs to, what it allows and when it expires.

JWT
eyJhbGciOi…
Run
Decoded
alg: HS256
sub: 1234567890
Expired ✕

How to use it — step by step

A JSON Web Token — the long text that starts with “eyJ”.

1

Paste your input

Paste or type your content into the big input box.

2

Decode Token

Press the button. The result is created instantly on your device.

3

Copy the result

Check the output and press Copy to use it anywhere.

Pro tips

Small things that make the result better.

✦Never share live tokens publicly — they can act like passwords.
✦This tool decodes only; it does not verify the signature.
✦Check the “exp” time when debugging login problems.

Quick facts

3 partsheader, payload, signature
Expiryautomatic check
Localtoken never leaves browser
Freeno signup

Frequently Asked Questions

Is my token sent to a server?+

No. Decoding happens entirely in your browser.

Does it verify the signature?+

No. Verifying needs the secret or public key. This tool only shows the contents.

Is a JWT encrypted?+

Normally no — it is just encoded, so anyone holding it can read it. Do not put secrets inside.

Is my data safe?+

Yes. Everything runs inside your own browser. Your text, files and images are never uploaded to any server.

More Free Tools

Guides you might like

All guides →
Base64 EncoderBase64 is not encryption, and it makes files a third bigger
JSON FormatterWhy your JSON will not parse, and how to find the bad comma
UUID GeneratorCan two UUIDs ever be the same? The odds, in pictures
Robots.txt Generatorrobots.txt explained: Allow, Disallow, wildcards and the mistakes that block your site