Can this verify the JWT signature?

No. Signature verification requires access to the secret key or public key used to sign the token, which is not available client-side. This tool is for inspection only.

Is it safe to paste a real JWT here?

JWT payloads are base64-encoded, not encrypted. Treat any JWT as sensitive — paste only tokens that have already expired or tokens from non-production environments when using any online tool.

JWT Decoder — Inspect JSON Web Token Header and Payload

All tools › JWT Decoder ● Live Developer Tools

JWT token

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1516239022
}

Signature

SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

JWT token

Header

Payload

Signature

More Developer Tools tools

.dockerignore Generator

.gitignore Generator

.htaccess Redirect Generator

Aspect Ratio Calculator

Barcode Generator

Base64 Encoder / Decoder