What are the three parts of a JWT?

A JWT consists of three Base64URL-encoded parts separated by dots: the Header (algorithm and token type), the Payload (claims/data), and the Signature (used to verify the token authenticity).

Is decoding the same as verifying a JWT?

No. Decoding simply reads the Base64URL-encoded data and makes it human-readable. Verification checks the signature using a secret or public key to ensure the token has not been tampered with. This tool decodes but does not verify signatures.

Is it safe to paste my JWT here?

Yes. Decoding happens entirely in your browser — no token data is ever sent to a server. However, avoid sharing JWTs that contain sensitive production credentials with any online tool.

What does the exp claim mean?

The exp (expiration time) claim identifies the time after which the token must not be accepted. It is expressed as a Unix timestamp (seconds since January 1, 1970). This tool automatically converts it to a readable date and shows whether the token is expired.

What algorithms do JWT tokens use?

The most common JWT signing algorithms are HS256 (HMAC-SHA256), HS384, HS512, RS256 (RSA with SHA-256), and ES256 (ECDSA). The algorithm is specified in the alg field of the token header.

JWT Decoder - Decode and Inspect JSON Web Tokens Online

Tools / Dev Tools / JWT Decoder

JWT Decoder

Paste JWT Token

Frequently Asked Questions

JWT (JSON Web Token) is an open standard (RFC 7519) for securely transmitting information between parties as a compact, URL-safe JSON object. It is commonly used for authentication and authorization in web applications.

Most Popular Dev Tools

All Time

PDF to Base64

SHA1 Generator

PNG to Base64

SHA256 Generator

JPG to Base64

New

Markdown Editor Write Markdown and see the rendered result side by side. Headings, lists, tables, code blocks and links are supported; copy the HTML or download .md and .html files. Runs in your browser.

View Page

Popular Today

YAML Formatter Reindent messy YAML, check it for errors with the line number, and read it back as JSON. Keeps your comments, block scalars and anchors. Runs in your browser.

View Page

Related Dev Tools

MD5 Hash Generator Free MD5 hash generator: turn any text or file into an MD5 checksum in your browser - useful for integrity checks and quick fingerprinting.

Base64 Encoder & Decoder Free Base64 encoder and decoder: convert text or files to Base64 and back, entirely in your browser - nothing is uploaded to a server.

Lorem Ipsum Generator Free Lorem Ipsum generator: create placeholder text by paragraph, sentence or word count, with optional HTML tags for your design mockups.

URL Encoder & Decoder Free URL encoder and decoder: convert links and query parameters to percent-encoding and back, with full-URL and component modes, in your browser.

Case Converter Free case converter: switch any text between lowercase, UPPERCASE, camelCase, PascalCase, snake_case, kebab-case and CONSTANT_CASE in one click.

Other Tools You May Like

Word to PDF Convert Word to PDF for free: upload a DOC, DOCX, ODT or RTF file and download a properly formatted PDF in seconds - no registration or watermark.

PDF to Word Convert PDF to Word for free: upload a PDF and download an editable DOCX in seconds - no registration, no watermark and nothing to install.

Word Counter Free word counter: paste any text to count words, characters, sentences and paragraphs, and see the estimated reading time - nothing leaves your browser.

Character Counter Free character counter: count characters with and without spaces, plus words and lines, and check SEO limits for titles and meta descriptions.

Keyword Density Checker Free keyword density checker: paste text or a URL to see how often each word and phrase appears, with percentages for one, two and three-word terms.