JWT Decoder
Decode JWT tokens, inspect claims, check expiry, and verify signatures. Paste your token below.
Paste a JWT token to decode it instantly
Frequently Asked Questions
- Is it safe to paste my JWT token here?
- Yes — the JWT is decoded entirely in your browser. Nothing is sent to any server. However, treat production tokens carefully and rotate them after testing.
- Can it verify JWT signatures?
- Yes for HMAC-SHA256 (HS256) tokens — enter your secret key. For RSA/ECDSA tokens, verification is shown as 'not supported' as the private key would be required.
- Is this tool free to use?
- Yes, completely free. No account, no subscription, no hidden limits.
- Are my files safe? Do you upload them?
- Your files never leave your device. All processing runs locally in your browser using JavaScript — nothing is sent to any server.
- Does it work on mobile?
- Yes, it works on all modern browsers including mobile Safari and Chrome on iOS and Android.