JWT Decoder

Decode, inspect and verify JSON Web Tokens. Examine headers, payload claims, expiration, and HS256 signatures.

Token inspection workspace

Decoding is automatic as you edit the token.

Token length

Characters

JWT segments

Expected: 3

Algorithm

Not provided

From unverified header

Encoded token

Paste your compact JWT below.

Loading editor...

The header and payload are decoded locally.

Header

Algorithm and token type

Loading editor...

Payload

Claims and token metadata

Loading editor...

Signature verification

Verify HS256 tokens using their shared secret.

HS256 secret key

Security notice

Decoding only reveals the contents of a JWT; it does not prove authenticity. Avoid pasting production access tokens, refresh tokens, or real secret keys into a public tool. This page processes tokens in your browser, but browser extensions and other client-side code may still have access to them.