ToolForge
Available · Free

JWT Decoder

Decode the header and payload of a three-segment JWT locally. This is a viewer only: it does not verify the signature or authenticate a token.

Decoding is not signature verification. Anyone can create a decodable token. Pasted access tokens may contain sensitive credentials; do not share them. This tool does not request keys, upload tokens, or store them.

How to use it

  1. Paste a three-segment JWT without sharing it elsewhere.
  2. Decode to inspect JSON and common claims.
  3. Copy the decoded JSON or clear the token.

Example & limitations

For example, inspect a test token's iss, sub, and exp claims while remembering that decoded claims are untrusted.

32 KB token limit. Expiration uses the device clock and is not a validity verdict. Access tokens can contain sensitive information. No keys are requested, and signatures are not verified.