Are algorithms other than HS256 supported?

Yes. Since the tool parses any JWT solely by Base64url decoding, it supports all standard algorithms, including RS256, ES256, PS256. The algorithm type is shown in the header panel.

Can I decode an expired token?

Yes. The tool decodes the token regardless of whether it is valid. If it has expired, a warning is shown next to the exp field.

Yes, it is completely free. It does not require registration or payment.

Can refresh tokens also be decoded?

Refresh tokens may not always be in standard JWT format; if they are in an opaque string form, they cannot be decoded. However, if a refresh token is structured in a JWT format, the tool will also parse it.

Does it work on mobile devices?

Yes, it works smoothly in modern mobile browsers. You can also easily use it on a mobile device by copying and pasting the token.

JWT Decoder — Free Online Tool

Privacy: Your token is decoded/encoded entirely in your browser and never sent to any server. Still, avoid pasting production secrets into public tools.

JWT Token

✅ Token valid (not expired)· exp: 3/17/2030, 5:46:40 PM

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Ali Veli",
  "iat": 1516239022,
  "exp": 1900000000
}

📖 Claim Explanations

sub		1234567890
name		Ali Veli
iat		18/01/2018, 01:30:22 UTC
exp		17/03/2030, 17:46:40 UTC

🔐 Signature Verification (Optional — HS256)

Enter the secret key to verify the signature in your browser. HS256 (HMAC-SHA256) only.

Note: Unless you enter a secret key, this tool does NOT verify the signature — it only decodes.

Auto-deleted in 7 days

256-bit SSL

Support

Your files are encrypted with SSL and automatically deleted from our servers 7 days after processing.

📖 How to Use

Upload document

Drag-drop or pick file.

Set options

Choose operation and parameters.

Process

Server runs the task.

Download

Get result in your format.

Frequently asked questions

Absolutely not. The decode process takes place entirely in your browser. Your token is never transmitted to our servers through any network request; therefore, you can safely inspect sensitive access tokens.

JWT Decoder user reviews

No reviews yet. Be the first to tell others how JWT Decoder worked for you.

JWT Decoder