JWT Decoder

Decode JSON Web Tokens (JWT) instantly and securely in your browser. Paste your token to inspect the header and payload. No data is sent to any server.

What is a JSON Web Token (JWT)?

JWT is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed.

Warning: JWTs are Base64 encoded, NOT encrypted!

Anyone with access to the token string can read the payload using a decoder like this one. Do not put sensitive data like passwords or social security numbers inside the JWT payload unless the entire token is further encrypted (JWE).