JWT Decoder

Read the header and claims of a JSON Web Token. It runs in your browser, and your token is never uploaded or stored.

Decoding is not verifying. This page can read a token but cannot prove it is genuine. Your server must check the signature. Treat real tokens like passwords: avoid pasting live production tokens into any website.