JWT Decoder

Decode JWT headers and payloads directly in your browser.

Decoder only. Decoding a JWT does not verify its signature or prove that the token is valid or trustworthy.

Decode JWT Tokens Online

Paste a JSON Web Token to inspect its decoded header and payload. HandyKitz formats the decoded JSON so claims and token metadata are easier to read.

What is a JWT?

A JSON Web Token, or JWT, is commonly represented as three Base64URL-encoded parts separated by dots: a header, a payload and a signature.

What does JWT decoding show?

Decoding reveals the JSON stored in the JWT header and payload, including claims such as expiration time, issue time, subject and issuer when they are present.

Does decoding verify a JWT?

No. Decoding a JWT does not verify its signature, authenticity or trustworthiness. A token can be decoded even when its contents have been modified or its signature is invalid.

Private browser-based decoding

JWT decoding happens locally in your browser. The token you enter does not need to be uploaded to the HandyKitz server.

More tools you might find useful.

Base64 Encoder & Decoder Encode or decode Base64 text locally.
JSON Formatter Format, validate and minify JSON data.
URL Encoder & Decoder Encode or decode URL-safe text.
UUID Generator Generate random UUID v4 identifiers instantly.
Unix Timestamp Converter Convert Unix timestamps and readable dates.
Text Diff Checker Compare two blocks of text and highlight their differences.