1. Enter your input
Paste text, code, data, or the value you want to inspect.
Decode JWT tokens online without verifying signatures. Paste a token, inspect the header and payload JSON, and copy decoded claims for debugging.
Paste text, code, data, or the value you want to inspect.
Format, encode, decode, validate, test, or generate the result instantly.
Use the cleaned result in your code, docs, API workflow, or notes.
This tool decodes header and payload only. It does not verify signatures.
JWT decoding helps inspect authentication claims, API tokens, expiration fields, user IDs, scopes, and debugging payloads without sending the token to a server.
No. It decodes the header and payload only. Signature verification requires the correct secret or public key.
No. Most JWT payloads are Base64URL encoded, not encrypted. Avoid pasting sensitive production tokens into tools you do not control.
Common fields include exp, iat, sub, iss, aud, scope, roles, and any custom claims used by your application.