JWT Decoder
Decode and inspect JSON Web Tokens. Everything runs locally.
How to Use
Paste your JWT token in the input box. The header, payload, and signature are instantly decoded and displayed with syntax highlighting. Expiration status is shown automatically if the token contains exp/iat claims.
Features
- Instantly decode JWT header and payload with syntax highlighting
- Shows token expiration status (expired or time remaining)
- Displays issued-at (iat) timestamp
- Identifies the signing algorithm (HS256, RS256, etc.)
- Everything runs locally — your tokens never leave your browser
Frequently Asked Questions
What is a JWT?
A JSON Web Token (JWT) is a compact, URL-safe token format used for securely transmitting information between parties. It consists of three parts: a header (algorithm info), a payload (claims/data), and a signature.
Is it safe to paste my JWT here?
Yes. RawDev decodes JWTs entirely in your browser. No data is sent to any server. You can verify this in your browser's Network tab.
Can this tool verify JWT signatures?
This tool decodes and inspects JWTs but does not verify signatures, as that requires the secret key or public key used to sign the token.