JWT Decoder / Encoder - Verify and Sign Tokens

Free online JWT Decoder and Encoder. Decode, inspect, verify signatures, edit payloads, and generate new JSON Web Tokens instantly. 100% local processing.

Encoded Paste a token here

Encoding...

Decoded Edit payload and secret

Header Algorithm & Token Type
Payload Data
Signature

Signature verification requires the secret key and is not performed by this tool.

JWT Quick Reference

  • • A JWT has 3 parts: Header, Payload, and Signature, separated by dots
  • • The Header specifies the algorithm (e.g. HS256, RS256) and token type
  • • The Payload contains claims — statements about the user and metadata
  • • Never store sensitive data in a JWT payload — it is only encoded, not encrypted

About This Tool

What is a JWT?

JSON Web Token (JWT) is an open standard (RFC 7519) for securely transmitting information between parties as a JSON object. A JWT consists of three parts: Header, Payload, and Signature, separated by dots (xxxxx.yyyyy.zzzzz).

How This Tool Works

This tool decodes the Base64Url-encoded Header and Payload of a JWT to display the JSON contents. It also parses standard claims like expiration time (exp), issued at (iat), and others into human-readable formats. All decoding happens entirely in your browser — your tokens are never sent to any server.

Common JWT Claims

iss (Issuer): Who issued the token
sub (Subject): Who the token is about
aud (Audience): Intended recipient
exp (Expiration): When the token expires
iat (Issued At): When the token was created
nbf (Not Before): Token is not valid before this time

Frequently Asked Questions

What is a JSON Web Token (JWT)?

A JWT is a compact, URL-safe token format used for authentication and information exchange. It contains a Header (algorithm and type), Payload (claims/data), and Signature (for verification).

Is it safe to decode JWT tokens here?

Yes, all decoding happens entirely in your browser using JavaScript. Your token never leaves your device and is never sent to any server.

Can this tool verify JWT signatures?

This tool decodes and displays the token contents but does not verify signatures. Signature verification requires the secret key or public key, which should never be shared with third-party tools.

What does 'expired' mean for a JWT?

If a JWT has an 'exp' (expiration) claim, the token is considered expired when the current time is past the expiration time. Expired tokens should be rejected by the server.

Can I paste a 'Bearer' token directly?

Yes, this tool automatically strips the 'Bearer ' prefix if present. You can paste the full Authorization header value.

What is Base64Url encoding?

Base64Url is a variant of Base64 encoding that uses URL-safe characters (- instead of + and _ instead of /). JWT uses Base64Url to encode the Header and Payload.

Related Tools

Free Base64 Encoder Decoder Online - Encode & Decode Base64

Free online Base64 encoder and decoder. Convert text to Base64 and decode Bas...

Free Color Picker - HEX RGB HSL Converter & Palette Generator

Free online color picker with format conversion. Convert between HEX, RGB, HS...

Free Diff Checker - Text Compare Tool

Free online diff checker. Compare two text files side by side or inline. Find...

Free Hash Generator - MD5 SHA-256 SHA-512 HMAC Calculator

Free online hash generator. Calculate MD5, SHA-1, SHA-256, SHA-512 hashes. Ge...

Free JSON Formatter & Validator Online - Pretty Print JSON

Free online JSON formatter, validator, and beautifier. Format, minify, and va...

Free Lorem Ipsum Generator - Paragraphs, Sentences, Words

Free online Lorem Ipsum placeholder text generator. Generate paragraphs, sent...

Free Online QR Code Generator - Create Custom QR Codes

Free online QR code generator. Create QR codes for URLs, text, WiFi, vCards. ...

Free & Unlimited TikTok Video Downloader Without Watermark

Download any TikTok video without watermark online for free. Fast, secure, an...

Free Unix Timestamp Converter Online - Epoch Time Tool

Free online Unix timestamp converter. Convert epoch time to date, seconds to ...

Free URL Encoder Decoder Online - Encode & Decode URLs

Free online URL encoder and decoder. Encode special characters for URLs or de...

Free UUID Generator Online - v1, v4, v5, v7 & Bulk Generate

Free online UUID/GUID generator. Generate UUID v1, v4, v5, v7 and Nil UUIDs. ...

Free Word Counter - Character & Text Analyzer

Free online word counter and text analyzer. Count words, characters, sentence...