JWT Decoder & Encoder
Decode and inspect JWT tokens or create new JWTs. View header, payload, and verify signatures. Fast, free, browser-based.
💡 Tip: JWT tokens consist of three parts: Header (algorithm info), Payload (claims/data), and Signature (verification). This tool decodes the header and payload but cannot verify signatures without the secret key.
Related JWT Tools
How to Use
- Select 'Decode' to inspect a JWT token, or 'Encode' to create one
- Paste your JWT token or JSON payload in the input field
- Click Run to process the token
- View the decoded header, payload, and signature
- Copy the result using the Copy button
Example
Input
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Output
{
"header": {
"alg": "HS256",
"typ": "JWT"
},
"payload": {
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
},
"signature": "SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}FAQ
What is a JWT token?
JWT (JSON Web Token) is a compact, URL-safe way to represent claims between two parties. It consists of three parts: header, payload, and signature, separated by dots.
Is it safe to decode JWTs here?
Yes, all processing happens in your browser. Your JWT is never sent to any server. However, never share sensitive JWTs publicly.
Can this tool verify JWT signatures?
This tool decodes and displays JWT contents. Signature verification requires the secret key, which should never be shared in a browser tool.
What's the difference between decode and encode?
Decode extracts the header and payload from an existing JWT. Encode creates a new JWT from JSON data (without a valid signature for security).