How do I decode a JWT token?

Paste your JWT into the JWT Decoder tool. It will split the token and decode the Base64url-encoded header and payload, showing all claims in readable JSON.

What are the three parts of a JWT?

A JWT has three dot-separated parts: the header (algorithm info), the payload (claims/data), and the signature (verification hash).

Can I verify a JWT signature online?

Signature verification requires the secret key. The decoder can decode the contents but cannot verify the signature without the server's secret.

What is the exp claim in a JWT?

The exp claim is the expiration time as a Unix timestamp. After this time, the token is considered expired and should be rejected.

Is it safe to paste my JWT into an online decoder?

For production tokens containing sensitive data, use only client-side decoders. Our tool processes everything in your browser without sending data to a server.

JWT Decoder – Dev Tools Online — Free Developer Utilities

ⓘ

Quick Answer

A JWT (JSON Web Token) is a compact, self-contained token with three Base64url-encoded parts: header, payload, and signature — used for authentication and data exchange. This decoder reveals all claims in your token instantly, including expiration time.

Decode a JWT token to reveal its header, payload, and signature. Shows expiry countdown.

Paste JWT Token

Header

Payload

Signature (raw)

Cite This Tool

JWT Decoder. (2026). DevTools Online. Retrieved from https://devutilitypro.com/jwt-decoder/

Was this tool helpful?

Cite This Tool