🛠️DevTools

JWT Decoder & Encoder

Decode and inspect JWT tokens or create new JWTs. View header, payload, and verify signatures. Fast, free, browser-based.

Ad Slot
Try:
0 characters

💡 Tip: JWT tokens consist of three parts: Header (algorithm info), Payload (claims/data), and Signature (verification). This tool decodes the header and payload but cannot verify signatures without the secret key.

How to Use

  1. Select 'Decode' to inspect a JWT token, or 'Encode' to create one
  2. Paste your JWT token or JSON payload in the input field
  3. Click Run to process the token
  4. View the decoded header, payload, and signature
  5. Copy the result using the Copy button

Example

Input

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

Output

{
  "header": {
    "alg": "HS256",
    "typ": "JWT"
  },
  "payload": {
    "sub": "1234567890",
    "name": "John Doe",
    "iat": 1516239022
  },
  "signature": "SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}

FAQ

What is a JWT token?

JWT (JSON Web Token) is a compact, URL-safe way to represent claims between two parties. It consists of three parts: header, payload, and signature, separated by dots.

Is it safe to decode JWTs here?

Yes, all processing happens in your browser. Your JWT is never sent to any server. However, never share sensitive JWTs publicly.

Can this tool verify JWT signatures?

This tool decodes and displays JWT contents. Signature verification requires the secret key, which should never be shared in a browser tool.

What's the difference between decode and encode?

Decode extracts the header and payload from an existing JWT. Encode creates a new JWT from JSON data (without a valid signature for security).

Ad Slot