JWT Decoder
Decode and inspect JSON Web Tokens instantly. Free, no signup.
Frequently Asked Questions
What is a JWT?▼
A JSON Web Token (JWT) is a compact, URL-safe token format used for securely transmitting information between parties. It consists of three Base64URL-encoded parts: header, payload, and signature.
Is it safe to paste my JWT here?▼
Yes. All decoding happens entirely in your browser. No data is sent to any server. However, never share your JWTs publicly as they may contain sensitive information.
Does this tool verify the signature?▼
No. This tool only decodes and displays the JWT contents. Signature verification requires the secret key or public key, which we do not have access to.
What do exp, iat, iss, and sub mean?▼
These are standard JWT claims: exp (expiration time), iat (issued at), iss (issuer — who created the token), and sub (subject — who the token is about).