JWT Decoder
Paste a JWT (three base64url parts). We decode header and payload and show JSON. We do not verify the signature.
Decode JWT
How it works
We split by dot, base64url-decode the first two segments, and parse as JSON. Padding is added as needed.
When to use it
Use to inspect claims during development. Never trust client-side decoding for security.
Frequently asked questions
Signature verified?
No. This is decode-only. Use your backend or a library to verify.