JWT Decoder
Decode Entra ID access and ID tokens. Inspect header, payload, claims and expiry.
Processed locally in your browser
Paste a JSON Web Token. A leading “Bearer ” is removed automatically.
Decoded header and payload appear here
Paste an access token or ID token on the left, or load a sample to see how it works.
About this tool
A JSON Web Token (JWT) consists of three Base64URL-encoded parts: a header, a payload with claims and a signature. Microsoft Entra ID issues access tokens and ID tokens in this format.
Your token is processed locally in your browser. Nothing is uploaded, logged or stored – the page makes no network requests while decoding. You can verify this in your browser’s developer tools.
Decoding is not validation. This tool does not verify signatures, so never trust a token’s content based on decoding alone. Also note that access tokens for Microsoft Graph are meant for Graph only – your application should not parse or validate them.
Related tools
AADSTS Error Lookup
Look up Entra sign-in error codes – meaning, what to check and how to find affected sign-ins.
GUID Generator
Generate cryptographically random GUIDs in the formats Microsoft tools expect.
Message Header Analyzer
Paste email headers to see the delivery path, delays, SPF/DKIM/DMARC results and Microsoft 365 spam verdicts.