JWT Decode

JWT Decoder

Detected Algorithm: None

Header (decoded)


        

Payload (decoded)


        

Signature (Base64URL)


      

JWT Encoder

Encoded JWT


        
        
      

About the Tool

JWT Decode, hosted at jwtdecode.in, is a free, secure, and user-friendly online JWT decoder and encoder designed for developers and security professionals. Decode JWT tokens effortlessly with support for multiple algorithms, including HS256, HS384, HS512, RS256, RS384, RS512, ES256, ES384, and ES512. Encode JWTs using HS256 with an optional secret key. All operations are performed client-side, ensuring your data remains private. Whether you're working with Angular, Node.js, Java, Python, or other frameworks, our JWT parser simplifies JWT authentication and token management.

What is JWT?

A JSON Web Token (JWT) is a compact, URL-safe token used for secure data exchange, commonly in authentication and authorization scenarios. It consists of three parts: Header, Payload, and Signature, separated by dots (.). The header defines the token type and algorithm (e.g., HS256), the payload contains claims (e.g., user data), and the signature ensures integrity. JWTs are widely used in APIs, OAuth, and services like AWS Cognito and Auth0 for secure, stateless authentication.

How to Decode JWT Token

Decoding a JWT token allows you to view its header, payload, and signature. With jwtdecode.in, it’s simple:

  1. Paste your JWT token into the "Enter JWT Token" textarea in the decoder section.
  2. The tool automatically detects the algorithm (e.g., HS256, RS256, ES256) and displays it.
  3. View the decoded header, payload, and signature in the respective output fields.
  4. No secret key is required, making it ideal for quick JWT token decoding online.

Our decoder supports all major algorithms, making it compatible with JWTs from Java, JavaScript, Python, Node.js, and more.

How to Edit a JWT Token

Editing a JWT involves decoding it, modifying the header or payload, and re-encoding it. Here’s how to do it with jwtdecode.in:

  1. Decode the JWT token using the decoder section to view its header and payload.
  2. Copy the decoded header and payload JSON into the encoder section’s "Header (JSON)" and "Payload (JSON)" textareas.
  3. Edit the JSON as needed (e.g., change a claim in the payload or update the algorithm in the header).
  4. Optionally provide a secret key for HS256 encoding, or leave it blank to generate a random key.
  5. Click "Encode & Sign JWT" to create a new JWT with your changes.

Note: Editing and re-encoding a JWT requires a valid secret key for the signature to be valid. Use this feature for testing or development purposes.