Decode · inspect · verify — 100% in your browser
♥ Support
⚠ JWTs are encoded, not encrypted. Anyone who has the token can read its contents. Never store passwords, secrets, or sensitive data in a payload.
Token 0 B copy paste
Paste a token to decode.
Decoded — copy header copy payload 
// paste a JWT and the decoded header + payload appear here
—
Claims
Token claims (expiry, issuer, subject, scopes…) appear here once decoded.
JWT Inspector is free & open. Made by a student developer. Become a patron

Verify signature (HS256)

Paste the shared secret used to sign the token, then check.

About JWTs

Copied!