Tool
Inspect JWT and Token with JWT Decoder. It helps surface readable fields and errors for debugging, validation, and compatibility checks.
JWT Decoder
Inspect JWT and Token with JWT Decoder. It helps surface readable fields and errors for debugging, validation, and compatibility checks.
Live Tool
JWT Decoder
Inspect JWT and Token with JWT Decoder. It helps surface readable fields and errors for debugging, validation, and compatibility checks.
Tool Workspace
JWT Decoder
Inspect JWT and Token with JWT Decoder. It helps surface readable fields and errors for debugging, validation, and compatibility checks.
Fallback
JWT Decoder
Inspect JWT and Token with JWT Decoder. It helps surface readable fields and errors for debugging, validation, and compatibility checks.
Related tools
Developer Tools
Open tool
This page loads the live tool workspace directly.
Developer Tools
About JWT Decoder
JWT Decoder reads the header and payload portions of a JSON Web Token so you can inspect claims such as issuer, audience, subject, expiry, and scopes. Decoding a JWT does not verify its signature or prove that it is trustworthy.
Reference: JSON Web Token specification (RFC 7519)
01
How to use it
- Use a redacted or non-production token whenever possible.
- Inspect the header, claims, and expiry fields, then compare expected issuer, audience, and scopes with your application configuration.
- Verify the token signature and required claims in the application or an approved identity-provider workflow before accepting it.
02
Frequently asked questions
Does decoding a JWT verify it?
No. A JWT payload is normally only Base64URL-encoded. Signature validation, issuer, audience, expiry, and other claim checks are separate steps.
Can I paste an access token here?
Treat access tokens as credentials. Use a redacted or short-lived test token unless the page's processing behavior and your organization's policy explicitly permit it.
What does an expired token mean?
The exp claim is a timestamp supplied by the token issuer. Your application should apply its own validation rules, including permitted clock skew.
03
Input, output, and validation
Paste or enter technical content, run the tool, and use the output to support debugging, formatting, or data exchange. For structured data, also verify syntax, field types, encoding, and the destination system's constraints.
Example check: start with a minimal sample that contains no keys, tokens, or production data. Verify the structure and result, then apply the same rule to a working copy.