Decode JSON Web Tokens

Paste a token to securely inspect its Header, Payload, and Signature.

Decoding is 100% client-side. We do not cryptographically verify the signature key — we only decode the payload.

Header

Algorithm & Token Type 
{...}

Payload

Data (Claims) 
{...}

Signature

Verification Hash 
...

Understanding JWT Structure

Header

Consists of the token type (JWT) and the signing algorithm such as HS256 or RS256. It is color-coded red in the visualizer.

Payload

Contains the claims — statements about the user plus metadata like expiration time. It is color-coded purple in the visualizer.

Signature

Used to verify that the sender of the JWT is who it claims to be and that the message has not been tampered with. It is color-coded blue in the visualizer.