JWT Decoder

Decode JWT tokens and view header, payload and expiration

This tool only decodes the JWT. It does NOT validate the signature.

FAQ

What is JWT?

JWT (JSON Web Token) is a standard for securely transmitting information between parties as a JSON object. It consists of Header, Payload and Signature.

Is JWT secure?

The JWT payload can be read by anyone (it's just Base64). Security lies in the signature, which ensures the token wasn't altered. Never put sensitive data in the payload.

What does each part of the JWT mean?

Header: algorithm and token type. Payload: data/claims (sub, exp, iat, etc). Signature: hash of header + payload + secret, used to validate integrity.

Free Online JWT Decoder | DERRICO Dev Tools