Skip to the tool
GigaJSON

JWT Decoder

All tools
Guides Open GigaJSON

Paste a JSON Web Token to see its header and payload. The issued, not-before and expiry times are shown in your time zone. Decoding happens in your browser, so the token never leaves this page.

How to use it

  1. Paste the token (three parts separated by dots).
  2. The header, payload and times appear.
  3. Copy the payload as JSON or open it in GigaJSON.

Private

This tool runs in your browser: nothing you paste is uploaded, and nothing is kept after you leave. If your connection drops while you're here, the tool keeps working. When one tool isn't enough, GigaJSON opens your data with a tree, a table, JSONPath/JMESPath/jq queries, transforms, diff and history.

Questions

Does it verify the signature?

No, it only decodes the token. Checking the signature needs the secret or the public key, and you shouldn't paste secrets into websites.

Is it safe to paste a token here?

The token is decoded in your browser and never sent anywhere. Still, treat a live token like a password.

All tools