JWT Decoder & JSON Web Token Debugger
Decode, inspect, and validate JSON Web Token headers, payloads, and claims
JSON Web Token (JWT) Debugger & Decoder
100% Client-Side Safe
What is a JSON Web Token (JWT)?
A JSON Web Token (JWT, RFC 7519) is a compact, URL-safe means of representing claims to be transferred between two parties. JWTs are ubiquitous in modern OAuth 2.0, OpenID Connect, and stateless REST API authentication workflows.
Structure of a JWT
Every JWT consists of three base64url-encoded parts separated by periods (.):
- Header: Specifies the token type and cryptographic hashing algorithm (e.g., HS256, RS256, ES256).
- Payload: Contains the claims (e.g., user identity, role, issuer, expiration timestamp).
- Signature: Cryptographic verification hash ensuring the token has not been tampered with.
Frequently Asked Questions
Is it safe to paste production JWTs into this tool?
Yes. Decoding occurs in memory without storing tokens or private keys on our servers. Sensitive signature secrets are never required to read the payload.