JWT Decoder

Decode, verify, and debug JSON Web Tokens (JWT) securely on the client side.

Encoded Token

Label

Paste a JWT to decode it. No data is sent to any server.

Header

Algorithm & Token Type

{}

Payload

Data & Claims

{}

Signature

Verification

Signature verification requires a secret key.

JWT Decoder

A JWT (JSON Web Token) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed.

Structure of a JWT

A JWT typically consists of three parts separated by dots (.):

Header: Typically consists of two parts: the type of the token, which is JWT, and the signing algorithm being used, such as HMAC SHA256 or RSA.
Payload: Contains the claims. Claims are statements about an entity (typically, the user) and additional data.
Signature: To create the signature part you have to take the encoded header, the encoded payload, a secret, the algorithm specified in the header, and sign that.

Security Note

This tool decodes JWTs entirely on your browser (client-side). Your tokens are never sent to our servers. However, you should always be cautious when pasting sensitive tokens (like production access tokens) into any online tool.

Structure of a JWT

A JWT typically consists of three parts separated by dots (.):

Header: Typically consists of two parts: the type of the token, which is JWT, and the signing algorithm being used, such as HMAC SHA256 or RSA.
Payload: Contains the claims. Claims are statements about an entity (typically, the user) and additional data.
Signature: To create the signature part you have to take the encoded header, the encoded payload, a secret, the algorithm specified in the header, and sign that.

JWT Decoder

JWT Decoder

Structure of a JWT

Security Note

Related Security Tools

JWT Decoder

JWT Decoder

Structure of a JWT

Security Note

Related Security Tools