JWT Decoder
Free online tool · runs in your browser
Inspect JWT tokens without verification.
Quick tutorial
- 1Paste a JWT.
- 2Click Decode.
- 3Review header, payload, and expiration.
Free online jwt decoder
Decode JWT tokens online and inspect the header, payload, and expiration without sending the token anywhere. This JWT debugger is for reading claims — it does not verify signatures, so never treat decoded data as trusted. Paste a token, click Decode, and review JSON claims locally. Avoid production tokens on shared devices.
How to use JWT Decoder
- Paste a JWT.
- Click Decode.
- Review header, payload, and expiration.
Limitations
- Decoding is NOT verification. Never trust decoded data without signature validation.
Example
Input
header.payload.signature
Output
Decoded header and payload JSON
FAQ
Frequently Asked Questions
Does this JWT decoder verify signatures?
No. It only base64-decodes the header and payload. Signature verification requires the secret or public key and a real verifier.
Is it safe to paste a JWT here?
Processing is local, but avoid production tokens on shared or untrusted computers. JWTs can contain emails, user IDs, and other claims.
Can I decode an expired JWT?
Yes. Expiration is displayed when the exp claim exists; an expired token can still be decoded.
Is it safe to paste production JWTs?
Avoid pasting secrets on shared machines. This tool does not verify signatures.
Is JWT Decoder free to use?
Yes. JWT Decoder on ShadowReference is free, with no account, no watermarks, and no server-side processing.
Does this tool send my data to a server?
No. All processing happens locally in your browser. Your input never leaves your device.