qevroJWT Decoder
Decode JSON Web Tokens to inspect header, payload, and expiry. Does NOT verify signatures.
About JWT Tokens
What is a JWT?
JWT (JSON Web Token) is a compact, URL-safe token format used for authentication and information exchange. It consists of three Base64-encoded parts: header (algorithm), payload (claims like user ID, expiry), and signature. JWTs are used in OAuth, API authentication, and single sign-on.
How to Decode JWT Online
Paste your JWT token and instantly see the decoded header and payload as formatted JSON. The tool shows algorithm type, issued-at time, expiry time (with human-readable dates), and highlights expired tokens in red.
JWT Security Notes
JWTs are signed but not encrypted — anyone can read the payload by Base64-decoding it. Never put sensitive data (passwords, secrets) in JWT payloads. This tool does not verify signatures (that requires the secret key) — it only decodes and displays the content.