KBY Engineering Utilities

JWT Decoder

Strictly decode compact signed JSON Web Tokens and inspect their protected header, claims, signature presence, and advisory time checks without sending your token to a server.

jwt_decoder.sh

Local Decoding Only

Encoded JWT String

Prefer a redacted or non-production token. Decoded claims may still contain personal or privileged data.

Decoded token inspection

{ // Protected header }

{ // JWT claims set }

jwt_decoder v2.0.0 — RFC 7515 / RFC 7519 aligned.

All decoding happens strictly in your browser. Tokens are never transmitted to our servers. Decoding does not verify authenticity or acceptance policy.