JWT to JSON Converter

Paste any JWT to instantly extract its header and payload as formatted, readable JSON. Inspect all claims, timestamps, and values — no sign-up, no servers, 100% in your browser.

100% in-browser — nothing uploaded

Encoded JWT

HeaderPayloadSignature
Awaiting a token — everything is decoded locally in your browser.

Decoded Header

Paste a token to decode this segment.

Decoded Payload

Paste a token to decode this segment.

Verify Signature

Enter the secret to verify the signature

Features

100% private

Your token is decoded entirely in your browser. Nothing is uploaded, logged, or sent to any server or API.

Instant decoding

Paste a JWT and the header, payload, and claims are decoded in real time — no button required.

Human-readable claims

Standard claims like exp, iat, and nbf are explained and shown as readable dates with expiry status.

Signature verification

Verify HS256/384/512 with a secret, or RS, PS, and ES algorithms with a public key — all client-side.

JWT structure explained

Converting a JWT to readable JSON

A JSON Web Token is a compact representation of JSON data — the header and payload are JSON objects that have been minified and Base64Url-encoded to make them suitable for HTTP headers and URLs. Converting a JWT back to JSON means Base64Url-decoding these parts and formatting the resulting JSON in a human-readable way with proper indentation.

The JWT header JSON tells you the token type and the signing algorithm used. The payload JSON contains the actual claims — statements about the user and the token itself. Standard claims like exp and iat are Unix timestamps that are more readable when converted to human-readable dates, which this tool does automatically in the Claims view.

Paste your JWT above to extract both the header and payload as pretty-printed JSON. The tool displays them side by side with syntax highlighting, making it easy to scan claims, identify expiry times, and spot unexpected or missing claims. This is the fastest way to inspect a JWT without writing any code.

Header

Specifies the token type (typ) and the signing algorithm (alg), such as HS256 or RS256. Base64Url encoded.

Payload

Contains the claims — statements about the subject such as sub, name, roles, and timestamps like iat and exp.

Signature

Created by signing the encoded header and payload with a secret or private key. Guarantees integrity.

Step by step

How to decode a JWT token online

1

Paste your token

Copy a JSON Web Token and paste it into the encoded box. You can also load the example token to try it out.

2

Read the decoded data

The header and payload are decoded instantly. Switch to the Claims tab for plain-English explanations and expiry status.

3

Verify the signature

Enter the secret (HMAC) or public key (RSA/ECDSA) to confirm the token is authentic and hasn't been tampered with.

FAQ

Frequently asked questions