Developer tools
JWT Decoder
Decode JSON Web Token header and payload locally — no signature verification.
- Mobile Friendly
- Accessibility Tested
- SEO Optimized
- Fast Loading
- Responsive
Version 1.0.0 · Last reviewed
JWT Decoder
Decode header and payload locally. Signature is not verified.
How it worksShow guideHide guide
Introduction
Paste a JWT to view its header and claims as JSON. Decoding does not prove the token is authentic.
Step-by-step
- Paste the three-part JWT
- Decode to view header and payload
- Copy JSON as needed
Worked example
A typical JWT splits into header.payload.signature. This tool base64url-decodes the first two parts only.
Use cases
- Inspect access-token claims during development
- Check expiry (exp) and subject (sub) fields
- Debug malformed tokens offline
Frequently asked questions
Does this verify signatures?
No. Verification needs the secret or public key and must happen on a trusted server for real auth.
Is my token uploaded?
No. Decoding stays on this device.
Related tools
Popular tools
Was this helpful?
Your feedback stays on this device only — it is not sent to the mySutra team yet.