Decode and inspect JWT token payload and header
Built & maintained by Pappu Venkata Subbi Reddy, founder of Clacify
Clacify's JWT Decoder decodes JSON Web Tokens (JWTs) and displays the header (algorithm, token type), payload (claims like exp, iat, sub, iss), and signature section in a human-readable format. Paste any JWT to instantly see its expiry time, issuer, user ID, and custom claims — without verifying the signature. All decoding happens locally in your browser — your tokens are never sent to any server, which is important for security.
Paste your JWT (the three Base64-encoded sections separated by dots) into Clacify's JWT Decoder. The header and payload are instantly decoded and displayed as formatted JSON. You can see the expiry time (exp), issued-at time (iat), subject (sub), and any other claims without needing the signing secret.
Yes, on Clacify. JWT decoding only requires Base64 decoding — no secret key is needed to read the payload (though verifying the signature does require the key). Clacify's JWT Decoder runs entirely in your browser with no server upload, so your token data stays on your device.