JWT Decoder Online

Decode a JSON Web Token header and payload locally without treating its claims as verified. Free jwt decoder online, with no installation or account.

Tool capabilities

Input: TXT
Output: JSON · TXT

How to use JWT Decoder

Decode a JSON Web Token header and payload locally without treating its claims as verified. This jwt decoder works directly in your browser and is free to use without an account.

Paste the message or JWT into the input.
For HS256 verification or HMAC, enter the UTF-8 shared secret and run the calculation.
Inspect and copy the result. Clear the inputs when finished.

JWT Decoder · Example

Input

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJleGFtcGxlIn0.c2FtcGxl

Output

{
  "signatureVerified": false,
  "header": {
    "alg": "HS256",
    "typ": "JWT"
  },
  "payload": {
    "sub": "example"
  },
  "note": "Decoded claims are untrusted. Decoding does not verify the signature."
}

Usage notes

Inputs and results are processed on this device. Tool content is not sent to a processing server.

JWT decoding does not establish trust. HS256 verification checks a signature and reports time claims; it does not validate issuer, audience or application authorization.

Tokens and secret keys are held in memory and are never autosaved.

JWT Decoder