Does this verify the signature?

No. This tool only decodes the header and payload for readability; it never checks the signature against a secret or public key.

Is it safe to paste a production token here?

Decoding happens entirely in your browser and nothing is sent to a server, but as a best practice avoid pasting tokens containing sensitive live credentials into any third-party tool.

ssvpune

JWT Decoder

Back to where you were, or Developer if you arrived directly.

JWT Decoder

Decode a JSON Web Token's header and payload for inspection.

Use tool ↓

This tool only decodes the token for inspection — it does not verify the signature. Never rely on an unverified JWT for authentication or authorization decisions.

Paste JWT

About this tool

Paste a JWT to decode its Base64URL-encoded header and payload sections into readable JSON. This tool is for inspection only — it does not verify the token's signature, so it must never be used to determine whether a token is trustworthy for authentication or authorization.

Examples

A token like "eyJhbGci...header.eyJzdWI...payload.SIGNATURE" decodes to readable header and payload JSON.

Frequently asked questions

Related utilities

Base64 Encoder / DecoderEncode text to Base64 or decode Base64 back to text, UTF-8 safe.JSON FormatterPretty-print minified or messy JSON with 2 or 4-space indentation.JSON ValidatorCheck whether a JSON document is syntactically valid and pinpoint the error.JSON ViewerExplore JSON as a collapsible, color-coded tree.JSON MinifierStrip whitespace from JSON to reduce payload size.JSON DiffCompare two JSON documents and see added, removed and changed keys.