JWT Decoder
Decodes locally in your browser. Signature verification is not performed — never paste a production token into a tool you do not control.
Runs in your browser
Security & crypto
Decoding happens in your browser and the signature is not verified. Never paste a
production token into a decoder you do not control — a bearer token is a credential.
Header
Algorithm and token type.
Payload
The claims carried by the token.
Registered claims
Signature
Not verified. Verifying requires the signing key, which should never leave your systems.