How do I decode a JWT online?
Paste your JSON Web Token into the JWT decoder. It shows the header and payload as readable JSON so you can inspect claims. Decoding is not the same as verifying a signature.
Decode JSON Web Tokens and view their header, payload, and signature
Runs in your browser. No signup required.
Paste a JWT to decode header and payload instantly in your browser.
Open the JWT decoder.
Paste the full token into the box (three segments separated by dots).
Click Decode.
Read Header, Payload, and Signature. The signature is shown and is not verified.
Click Clear when you are done, especially for a production token.
Paste your JSON Web Token into the JWT decoder. It shows the header and payload as readable JSON so you can inspect claims. Decoding is not the same as verifying a signature.
No. Decoding reads the Base64URL segments. Verifying checks the signature with a secret or key. Use this tool to inspect claims; use your auth library to verify trust.
UtilGenie’s JWT decoder runs in the browser so tokens aren’t uploaded to UtilGenie servers for decode. Still treat production tokens carefully and avoid pasting secrets into untrusted sites.
JWT segments are Base64URL-encoded JSON. The decoder parses those segments into header/payload objects. For generic Base64 strings (not JWTs), use the Base64 encoder/decoder tool instead.
This page is a decoder/inspector. It does not replace your app’s signing keys or auth server. Don’t paste private signing keys into any online form.
Advertisement