A JWT decoder that respects your tokens
viewjwt is a free tool for decoding, inspecting, and verifying JSON Web Tokens. It was built on one simple idea: you shouldn't have to send a token to a stranger's server just to read what's inside it.
Inspecting a token should be instant and private
JWTs are everywhere in modern authentication, and developers need to peek inside them constantly — checking claims, confirming expiry, and debugging signatures. viewjwt makes that effortless while keeping every byte on your own machine. No accounts, no noise, just the answer you need.
Principles behind viewjwt
Privacy by design
Your tokens are decoded and verified locally with the Web Crypto API. Nothing you paste is ever sent to a server, logged, or stored.
Fast and frictionless
No sign-up, no paywall, no clutter. Paste a token and read the decoded header, payload, and claims instantly.
Genuinely readable
Standard claims are explained in plain English, and timestamps like exp and iat are shown as real dates with expiry status.
Real verification
Check HS256/384/512 with a secret, or RS, PS, and ES algorithms with a public key — all client-side, never on a server.
Not just another online decoder
Nothing leaves your device
Many online decoders send your token to a backend. viewjwt does everything in the browser, so production tokens stay yours.
Built for developers
Clear layout, syntax highlighting, and claim explanations designed around the way engineers actually debug tokens.
Free to use
viewjwt is free. It may show ads or use affiliate links in the future to cover costs, but the core tool stays free and private.
Your data never leaves the browser
Every decode and signature check runs client-side. viewjwt has no backend that receives your tokens. We use privacy-respecting analytics only to understand aggregate traffic — never the contents of what you paste. Read more in our privacy policy.
Ready to decode a token?
Paste a JWT and see the header, payload, and claims in an instant — privately.