Viewer

JWT Viewer

Paste a JWT to view its header and payload as nicely formatted JSON side by side. Everything runs locally.

JSON Web Token

Local · not verified
About this tool

About JWT Viewer

The JWT Viewer shows a token’s header and payload as nicely formatted JSON side by side, decoded locally. It is for developers who simply want to read a token’s two JSON sections clearly.

A JWT’s header and payload are Base64url-encoded and hard to read inline. Viewing them as formatted JSON side by side makes the structure obvious, with the token kept private.

How to use

Step by step

  1. Paste the JWT you want to view.
  2. The header and payload are decoded and formatted as JSON.
  3. Read the two sections side by side.
  4. Copy whichever section you need.
Key features

What it offers

  • Side-by-side header and payload JSON
  • Formatted, indented output
  • Local decoding
  • Nothing uploaded — JWT Viewer
Common use cases

Where it helps

  • Quickly reading a token’s payload during development
  • Comparing the header algorithm against the payload claims
  • Copying a formatted claim set for a bug report
  • Learning the two-part structure of a JWT
Best practices

Tips for best results

  • Use this for reading; verify the signature server-side before trusting any claim.
  • Keep tokens out of shared documents, since they grant access while valid.
  • Check the header’s algorithm matches what your system expects.
Common mistakes to avoid

Pitfalls to watch for

  • Believing the formatted view confirms the token is valid; it only decodes it.
  • Pasting a token into shared notes, exposing a live credential.
  • Confusing the header’s algorithm field with actual signature verification.
Benefits

Why people use it

Clear layout

Header and payload formatted side by side.

Easy reading

Indented JSON instead of dense Base64url.

Private

Decoding happens in the browser.

Fast

Paste and read immediately.

FAQ

Common questions

The header and payload as pretty-printed JSON, placed side by side for easy reading and copying.
No. It only decodes and formats the token parts for viewing.
No. Viewing runs entirely in your browser.
Yes. Each panel has a copy button for the formatted JSON.
Private by design

This runs entirely in your browser

No file or text you enter here is uploaded. Encoding and decoding happen on your device using native browser APIs — close the tab and nothing remains on a server.

Install Toolisco Add it to your device for offline, one-tap access.