Private JWT Decoder
Decode JSON Web Tokens (JWT) locally. Your sensitive credentials never leave your browser.
Encoded Token
Decoded Content
Header: Algorithm & Token Type
{}
Payload: Claims / Data
{}
Signature Status
Signature verification is client-side. The integrity can be verified if a secret key is known.
How to Use the JWT Decoder
- Paste your encoded JSON Web Token (usually starts with
eyJ...) into the input field. - The tool automatically splits the token by periods (dots) and base64-decodes each section in real-time.
- Inspect the token's metadata in the Header and the actual user claims in the Payload.
- Check the expiration status (exp) and issued time (iat) which are translated to human-readable dates.
Frequently Asked Questions
Is my JWT secure here?
▼
Absolutely. Because this page runs entirely in client-side JavaScript, all decoding operations happen directly on your own device. Your token is never transmitted over the network to any server.
What are the three parts of a JWT?
▼
A JSON Web Token consists of three parts separated by dots (.): Header, Payload, and Signature. The Header contains metadata about the token type and algorithm. The Payload contains the claims (user data). The Signature verifies that the sender of the JWT is who it claims to be.