JWT Decoder
Decode and inspect JSON Web Tokens (JWT). View header, payload and signature instantly.
What is a JWT?
JWT (JSON Web Token) is an open standard for securely transmitting information between parties as a JSON object. It consists of Header, Payload, and Signature separated by dots.
Is decoding a JWT safe?
Decoding only reads the token content. It does not verify the signature. Never put sensitive data in JWT payloads as they can be decoded by anyone.
What algorithms does JWT support?
Common algorithms include HS256 (HMAC), RS256 (RSA), ES256 (ECDSA), and PS256 (RSA-PSS). The algorithm is specified in the header.
Does this tool verify JWT signatures?
No, this tool only decodes the token to display its contents. Signature verification requires the secret key or public key.