01
Paste one compact token
Paste the three dot-separated JWT sections directly into the text field.
Developer Tools
JWT Decoder
Read a compact JWT header and payload locally, with no claim that the signature is valid.
0 / 100,000 characters
Decoded header
Decoded payload
Data handling
Storage and export controls
- Retention
- The tool's working state is kept only while this page is open. Inputs and results are not saved to persistent storage by Got A Tool.
- Export
- The tool may prepare a result after you run it. It downloads or copies it only when you choose that action.
Advertising and analytics are separate site services. We do not send selected tool input to them. Read the Privacy Policy for details.
How it works
Inspect JWT data without trusting it
02
Read header and payload
The first two base64url sections are decoded into formatted JSON in this browser.
03
Verify elsewhere
Use the issuer’s keys and validation rules before treating any decoded claim as trustworthy.
Important limit
Readable does not mean valid.
JWT header and payload sections are encoded, not secret. This page deliberately avoids claiming that a displayed token is authentic. It does not have the issuer’s key material and does not validate signatures, expiration, audience, or issuer values.
Local only
The pasted token stays in this browser tab.
Header and payload
Both readable JSON sections are formatted separately.
No signature verdict
The third section is not treated as proof.
Copy with care
Review decoded claims before sharing them.
FAQ
Common questions
Does this verify a JWT signature?
No. Decoding reads the first two sections; validation requires the correct issuer keys and claim rules.
Is a JWT payload encrypted?
Usually no. Anyone holding a typical compact JWT can decode its header and payload, so sensitive data should not be placed there.
Does this upload a token?
No. The conversion runs entirely in this browser tab.
Keep working
Related tools
Base64 Encoder & Decoder
Encode UTF-8 text to Base64 or decode validated Base64 text locally in your browser.
Open tool →JSON Formatter & Validator
Format, minify, sort, and validate JSON locally with clear syntax feedback.
Open tool →Secret Scanner & Redactor
Find known API keys, tokens, webhooks, database passwords, and Bearer headers before sharing text.
Open tool →File Hash Generator
Calculate SHA-256, SHA-384, or SHA-512 checksums for files locally and compare an expected hash.
Open tool →