Decode a JWT
Read a JSON Web Token header and payload locally. This does not verify signatures on a server. 100% client-side processing in your browser. Absolute privacy with zero file uploads — files never leave this device.
JWT decoder shows the header and payload of a token locally. It does not verify the signature and does not contact the issuer.
A decoded payload is not proof the token is valid. Anyone can edit the middle section and the decoder will still display it.
Questions
Does decoding mean the token is trusted?
No. This only displays the JSON. Signature checks happen on the server that issued the token.
Is the token uploaded?
No. Decoding runs in this tab. Still avoid leaving secrets on a shared screen.