Decode JWT tokens online and inspect header, payload, claims, expiry time, issued time, algorithm, token parts, and readable JSON output instantly.
Useful for developers, API testing, authentication debugging, backend work, OAuth, and token inspection.
Paste a JSON Web Token and decode its header and payload without running any server-side API.
Decoded JWT header will appear here.
Decoded JWT payload will appear here.
| Claim | Value | Meaning |
|---|---|---|
| JWT claims will appear here after decoding. | ||
A JWT Decoder helps you inspect token data while debugging authentication, APIs, sessions, and authorization systems.
View readable JSON from the JWT header and payload without manually decoding Base64URL text.
Inspect exp, iat, nbf, issuer, subject, audience, and other common JWT claims.
Copy the decoded report or download a JSON file for API debugging, testing, or documentation.
JWT stands for JSON Web Token. It is a compact token format commonly used for authentication, authorization, API sessions, OAuth flows, and secure information exchange between systems.
A JWT usually has three parts: header, payload, and signature. The header describes the token type and algorithm, the payload contains claims, and the signature helps the server verify that the token was not changed.
| JWT Part | Purpose | Example |
|---|---|---|
| Header | Shows algorithm and token type | alg, typ |
| Payload | Contains claims and user data | sub, name, role |
| Signature | Verifies token integrity | HMAC or RSA signature |
| exp | Expiration time | Unix timestamp |
| iat | Issued at time | Unix timestamp |
Decode a JWT token in three simple steps.
Add a JWT token into the input box. A standard token has header, payload, and signature parts.
The tool decodes Base64URL header and payload into readable JSON and checks common claims.
Check expiry, issued time, algorithm, audience, issuer, subject, and copy or download the report.
Common questions about JWT decoding, claims, signature verification, expiry, and token safety.