← All Free Tools
DECODE A JWT AND INSPECT ITS PAYLOAD

JWT Decoder

Decode a JWT to see its payload contents, with optional signature verification against a known secret.

Frequently asked questions

A JWT payload is only base64-encoded, not encrypted — anyone with the token can already read its contents without a secret, so decoding it here reveals nothing new. That said, avoid pasting tokens containing sensitive production data into any third-party tool as a general precaution.

No — you can decode and read the payload without it. The secret is only needed if you want to verify the signature is genuinely valid (i.e. the token wasn't tampered with or forged).

Either the secret you entered doesn't match the one used to sign the token, or the token has been altered since it was issued — both mean the token shouldn't be trusted.

More free tools

QR Code Generator Password Generator Hash Generator Base64 Encode / Decode