JWT Decoder

Decode and visualize the content of JWT (JSON Web Token) tokens. Essential tool for developers working with authentication and APIs.

Algorithm

Encoded

Paste a token here

Decoded

Edit the payload and secret

HEADER: ALGORITHM & TOKEN TYPEred

PAYLOAD: DATApurple

VERIFY SIGNATUREblue

HMACSHA256(
  base64UrlEncode(header) + "." +
  base64UrlEncode(payload),
  your-256-bit-secret
)

Secret base64 encoded

How to use the JWT Decoder

Paste a valid JWT token into the text area.
Click 'Decode' to see the header, payload, and signature.
Analyze the information without exposing your secret key.
Use 'Clear' to reset the tool.

Features

Instant and secure decoding
Header and payload visualization in formatted JSON
Automatic detection of invalid tokens
100% client-side: your tokens are never sent to the server

Perguntas Frequentes

What is JWT?

JSON Web Token is an open standard (RFC 7519) for transmitting information between parties as a JSON object. It is commonly used for authentication and information exchange.

Is it safe to decode my token here?

Yes. Decoding happens 100% in your browser. Your tokens are never sent to any server. However, remember that decoding does not validate the signature.

Why can't I validate the signature?

Signature validation requires the secret key used to sign the token, which must remain private on the server. This tool only decodes the token so you can inspect its content.

Ad Space