# JWT Decoder

Canonical: https://herebetools.com/jwt

Decode and inspect JWT tokens

Paste any JWT (JSON Web Token) to instantly decode the header and payload claims. The decoder displays all fields in readable form, including expiry (exp), issued-at (iat), and not-before (nbf) timestamps converted to human-readable dates. Useful for debugging authentication flows, inspecting OAuth 2.0 and OIDC tokens, and verifying claims during development. Decoding happens entirely in your browser — no server request is made.

## Questions and answers

### Does the JWT Decoder verify the signature?

No — the decoder only decodes and displays the header and payload. Signature verification requires the secret or public key, which should never be pasted into an online tool.

### What JWT algorithms are supported?

The decoder displays tokens signed with any algorithm (RS256, HS256, ES256, etc.) since it decodes the base64url payload directly without verifying the signature.

## Related tools

- [JWT Builder](https://herebetools.com/jwt-builder): Build and sign JWT tokens in the browser
- [JWT Expiry](https://herebetools.com/jwt-expiry): Check JWT expiry, iat, and nbf time claims
- [Base64](https://herebetools.com/base64): Encode and decode Base64 strings and files

Tool processing runs in your browser.

## Sources and specifications

- [RFC 7519 — JSON Web Token](https://www.rfc-editor.org/rfc/rfc7519)

[Privacy policy](https://herebetools.com/privacy-policy) · [About](https://herebetools.com/facts) · [Topics](https://herebetools.com/topics)