Skip to content
Convertto

JWT Decoder

Decode a JSON Web Token to inspect its header, payload and expiry — locally, never sent anywhere.

To decode a JWT, paste the token above and its header and payload are Base64-decoded and shown as formatted JSON, along with issued-at and expiry timestamps in readable form. Decoding happens entirely in your browser, so the token is never transmitted or logged.

Runs in your browser
Privacy
Runs entirely in your browser — nothing is uploaded
Cost
Free, unlimited, no sign-up

Frequently asked questions

Does this verify the JWT signature?

No. Verification requires the signing secret or public key. This tool deliberately never asks for a secret — pasting one into a website would compromise it.

Is it safe to paste a real token here?

The decoding runs entirely in your browser with no network request. That said, treat any token you paste anywhere as potentially exposed, and rotate production credentials rather than reusing them.

How to use the jwt decoder

  1. 1Enter or paste your jwt.
  2. 2The result appears immediately — copy or download it.

Sources & specifications

Embed this tool

Put the working jwt decoder on your own site. It runs in your visitors' browsers exactly as it does here — free, no account, nothing uploaded.

Share this tool

Related tools

JWT VerifierVerify a JWT's HS256 signature and its expiry, issuer and audience claims, entirely in your browser.JWT SignerCreate a signed HS256, HS384 or HS512 JSON Web Token for testing, entirely in your browser.Base32 Encoder & DecoderEncode and decode Base32 (RFC 4648) — used by TOTP secrets and case-insensitive identifiers.Base58 Encoder & DecoderEncode and decode Base58 — the Bitcoin alphabet that omits look-alike characters.Base64 Encoder & DecoderEncode and decode Base64 with automatic direction detection, plus file and data-URI support.Binary to Text ConverterTranslate text into binary ones and zeros, and decode binary back into readable text.

Last updated

More encoders & decoders