JWT Decoder
Paste a JWT to see its header, payload, and standard claims. Everything runs locally in your browser — nothing you paste is sent to Docspira.
Nothing you paste is sent to Docspira. Privacy.
Decoded locally. Signature not verified.
Header
Payload
Claims
Signature
—
What is a JWT?
A JSON Web Token (JWT) is a compact, URL-safe token made of three Base64URL-encoded parts separated by periods: a header, a payload, and a signature. Decoding reveals the token's header and payload contents — it does not verify its signature or authenticity. A token that decodes successfully can still be forged, expired, or signed with an unexpected key; only a real signature check against the correct key can establish trust. Docspira decodes entirely in your browser and never sends the token anywhere.