DEVELOPMENT · FREE, NO SIGN-UP
JWT / JWE decoder
Inspect token headers and payloads locally.
Decoding does not verify the token's signature or authenticity. A JWE is encrypted: only its protected header is displayed, not its content.
JWT / JWE decoder: how it works
Inspect JWT tokens without sending their content to external services. Read the declared algorithm in the header and the claims in the payload. For JWE, only the protected header is shown: the rest remains encrypted.
- Paste a compact token without the Bearer prefix.
- Select Decode token to read its header and, for JWT, its JSON payload.
- If a numeric exp claim exists, check the declared UTC expiration date.
Frequently asked questions
Does decoding validate a token?
No. This tool does not have the key needed to verify the signature. It also does not check issuer, audience or permissions. A readable payload does not prove authenticity.
Why can’t I read a JWE payload?
The JWE payload is encrypted and requires the corresponding keys and algorithms. It is not the same as a three-segment signed JWT.