Kastavo

JWT Decoder

Paste a JWT token and see its decoded content immediately.

Processed locally in your browser.

How it works

A JWT (JSON Web Token) has three parts separated by dots: header (algorithm and type), payload (the token's information/claims), and signature. This tool decodes the header and payload, which are just Base64 — anyone can read them, with or without the secret key. When present, the standard "exp" (expiration) and "iat" (issued at) fields are shown as readable dates and times. This tool only decodes the JWT. It does not verify whether the signature is valid. Verifying the signature requires the issuer's secret or public key, which this tool never asks for and couldn't use safely in the browser anyway.

Frequently asked questions

Related tools