Web

JWT decoder

Decode JWT headers and claims without implying signature verification.

Ready when you are

Input

Result

Add your contentPaste text or try a sample

Choose an actionClear options. Predictable results.

Take it with youCopy, download and carry on

Using this tool

Decode JWT headers and claims to inspect test-token fields and numeric dates.

Actions: Process

Example

Unsigned demonstration token with sub 123; never use it for authorization.

Example action and settings

Action: Process

Input / action

eyJhbGciOiJub25lIn0.eyJzdWIiOiIxMjMifQ.

Result / expected behavior

{
  "header": {
    "alg": "none"
  },
  "payload": {
    "sub": "123"
  },
  "signature": "",
  "verified": false,
  "numericDates": {}
}

Scope and limitations

Signatures, issuer, audience and authorization are not verified. verified is always false; decoded claims are not proof of identity.

Common mistakes

Use three dot-separated sections with JSON-object header and payload. Do not paste sensitive active tokens.

Related tools

Base64 encode / decode

Privacy and browser support

Input is processed in this browser. Do not use real keys or active sensitive credentials as demonstration data. Device features require browser support and your permission.