JWT Decoder

Debug your JSON Web Tokens. Decode Base64Url encoded claims.


            

            

Frequently Asked Questions

What is a JWT?

JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object.

Is the token defined here secure?

JWTs are encoded, not encrypted (unless JWE is used). This means anyone can read the contents if they have the token. Do not put secrets inside the payload.

How do I verify the signature?

This tool only decodes the token structure (header and payload). To verify the signature, you need the secret key (for symmetric algorithms like HS256) or the public key (for asymmetric algorithms like RS256).