JWT Decoder
LiveDecode JWT header and payload locally.
All generated data is fictional and intended for development, testing, QA, prototyping, and automation only. Do not use it for fraud, impersonation, or illegal activity.
{
"header": {
"alg": "HS256",
"typ": "JWT"
},
"payload": {
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
},
"signature": "SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
"note": "Signature is NOT verified — decoding only."
}About this tool
Decode a JWT's header and payload locally to inspect claims (sub, iat, exp, scopes). Decoding only — the signature is not verified and the token never leaves your browser.
How it works
- Paste a JWT (the three dot-separated Base64URL parts).
- The decoder reads the header and payload and highlights the expiry and claims.
- Read the decoded JSON locally — the token never leaves your browser and the signature is not verified.
Example output
{
"header": {
"alg": "HS256",
"typ": "JWT"
},
"payload": {
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
},
"signature": "SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
"note": "Signature is NOT verified — decoding only."
}