JWT Header and Payload Decoder
Read a JWT header and payload locally without claiming to verify its signature.
Decoding does not validate a signature or establish that a token is authentic.
How to use
Paste a token with three dot-separated segments.
Select Convert / inspect.
Review the decoded JSON and the signatureVerified: false flag.
FAQ
How do I use this tool?
Paste a token with three dot-separated segments. Select Convert / inspect. Review the decoded JSON and the signatureVerified: false flag.
Does decoding prove the token is authentic?
No. Reading Base64URL JSON does not validate a signature, expiry, issuer or audience.
Which token formats work?
This reader expects a three-part JWT with JSON header and payload. Encrypted five-part JWE tokens are not supported.
Are my inputs uploaded?
Tool inputs are processed in your browser. Advertising makes separate requests as described in the privacy policy.