Search for a tool or command
Decode a JWT to inspect its header, payload, and claims instantly.
Paste a JSON Web Token to instantly decode its header and payload and read the claims inside. This online JWT decoder pretty-prints the JSON, highlights registered claims, and translates timestamp fields like exp, iat, and nbf into human-readable dates so you can spot expired tokens at a glance. Decoding is read-only and does not verify the signature.
Drop in the full token - the three dot-separated Base64URL segments. The tool splits and decodes them automatically.
See the signing algorithm (alg) and token type (typ), plus any key ID (kid) used to select the verification key.
Review the payload's claims with timestamp fields converted to readable dates, and check whether the token is currently valid.
The classic example token decoded into its header and payload.
Input
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5cOutput
Header:
{
"alg": "HS256",
"typ": "JWT"
}
Payload:
{
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
}Decode Base64 back to readable text, including URL-safe input.
Compute SHA-1, SHA-256, SHA-384, and SHA-512 hashes of text or files.
Convert between Unix timestamps and human-readable dates, both ways.
Pretty-print JSON with configurable indentation and instant validation.