What is a JWT (JSON Web Token)?

A JWT is a compact, URL-safe token format used for authentication. It contains three Base64-encoded parts: header, payload, and signature, joined by dots.

Is it safe to decode a JWT here?

Yes, decoding is done in your browser. However, JWTs can contain sensitive claims — avoid pasting production tokens into any online tool.

Can this tool verify a JWT signature?

Yes. Provide the secret key (for HS256) or public key (for RS256/ES256) in the Verify tab to validate the signature.

JWT Decoder & Encoder Online

EXECUTE.ONLINE

JSON Formatter HTTP Request Builder Base Converter Text Tools Markdown Preview CSV Tools Timestamp Converter YAML ↔ JSON HTTP Status Codes Number Base & IEEE 754

Base64 Encoder URL Encoder HTML Entities String Case Converter Slug Generator Lorem Ipsum Generator

Regex Tester Code Formatter Diff Checker Cron Builder SQL Formatter Subnet / CIDR Calc Meta Tag Preview .env Parser

Crypto Tools JWT Tool Randomizer Password Strength Checker

UUID Generator QR/Barcode

Color Converter

PDF Tools Image Converter

AI Client (BYOK)Token Estimator Audio Transcriber

JWT Debugger

Edit encoded token or decoded payload to see real-time updates.

Invalid Signature

Encoded Token

HeaderAlgorithm & Token Type

PayloadData Claims

Verify Signature

About JWT Decoder & Encoder Online

Free online JWT decoder and encoder. Decode and inspect JSON Web Tokens instantly. View header, payload, claims, and expiry. Encode new JWTs with HS256.

How to use JWT Tool

1Paste your JWT token (the full eyJ... string) into the input.
2The header and payload are decoded and displayed automatically.
3Check the 'Expiry' section to see if the token is still valid.
4To verify the signature, provide the secret key in the Verify tab.

Frequently Asked Questions

Related Tools

Crypto Tools

SHA Hashing, Bcrypt, RSA Key Gen.

Base64 Encoder

Encode and decode Base64 text & files.

HTTP Request Builder

Convert cURL ↔ fetch ↔ axios.

Randomizer

UUIDs, API Keys, WiFi Keys & Passwords.