Read the header and payload of a JSON Web Token, with iat, nbf and exp shown as real dates.
Runs in your browser. Your data is not uploaded or stored.
How to use it
Paste or type your JWT in the input box, or upload a file.
The result appears as you type.
Copy the result or download it as a file.
Good to know
A leading “Bearer ” is removed for you, so you can paste a whole Authorization header.
The signature is not verified. Decoding only shows what the token claims; your server must still check the signature.
Questions
Is my data uploaded anywhere?
No. Everything runs in your browser with JavaScript. What you type or paste never leaves your device.
Is it safe to paste a real token here?
The token is decoded in your browser and never sent anywhere. Even so, treat live tokens like passwords and avoid sharing screenshots of them.
Privacy
Your data stays on your device
Nothing uploaded
No account needed
No tracking cookies
Read the privacy notice
Every tool runs in your web browser. Text you paste and files you open are processed on your own device. We do not upload, store or sell them, and you do not need an account.
If you switch theme, that choice is saved in your browser so the site remembers it. Pages load fonts from Google Fonts, so your browser connects to Google’s servers to download them. We do not use advertising or tracking cookies; if that changes, this notice will be updated first.
These tools are free and provided as they are, without any warranty. We work hard to make results accurate, but please check anything important before you rely on it, especially converted data, generated passwords and hashes.
The JWT decoder shows what a token contains but does not verify its signature. Nothing on this site is legal, financial or security advice. GrowNiti Labs is not responsible for any loss arising from use of these tools.
