JWT Decoder

Paste a JSON Web Token to read its header and payload in plain JSON. See the signing algorithm, the claims (issuer, subject, audience, scopes), and the issued-at and expiry timestamps rendered as human-readable dates.

Useful when debugging authentication: check whether a token has expired, confirm which claims your API is receiving, or inspect a bearer token from a request header. The token is decoded entirely in your browser and never sent anywhere — but note that decoding only reads the token, it does not verify the signature, so never trust an unverified token in production.