xxxx.re
SecurityPrivacy-firstNo trackingRuns locally

JWT Decoder

Decode JSON Web Tokens and inspect headers, payloads, and expiration times.

Header

-

Payload

-

Quick tips

  • *Paste a JWT into the input.
  • *The header and payload are decoded locally.
  • *Errors appear if the token format is invalid.
Everything runs locally in your browser. No uploads or tracking.

How it works

  1. Step 1

    Paste a JWT into the input.

  2. Step 2

    The header and payload are decoded locally.

  3. Step 3

    Errors appear if the token format is invalid.

FAQ

Does this verify signatures?+

No. It only decodes the token. Verification requires the signing secret or key.

Is my token stored?+

No. The token stays in your browser.