All Tools
Utilities
JWT Decoder
Decode a JWT and inspect its payload
Free
No sign-up
Fast
About this tool
Decode a JWT to see its payload contents, with optional signature verification against a known secret.
Frequently asked questions
Is it safe to paste a real JWT here?
A JWT payload is only base64-encoded, not encrypted — anyone with the token can already read its contents without a secret, so decoding it here reveals nothing new. That said, avoid pasting tokens containing sensitive production data into any third-party tool as a general precaution.
Do I need the secret to decode a JWT?
No — you can decode and read the payload without it. The secret is only needed if you want to verify the signature is genuinely valid (i.e. the token wasn't tampered with or forged).
What does it mean if verification fails?
Either the secret you entered doesn't match the one used to sign the token, or the token has been altered since it was issued — both mean the token shouldn't be trusted.