JWT Decoder
Paste a JWT to decode its header and payload and check its expiry.
Header
Payload
Expiry:
How to use the JWT Decoder
- 1 Paste your JWT token.
- 2 The header and payload are decoded and shown as JSON.
- 3 The expiry (exp) is checked against now.
About the JWT Decoder
A JWT encodes a header and payload as Base64URL, separated by dots. This decoder reveals the claims inside so you can debug auth issues — it does not verify the signature.
Crucially, decoding happens 100% in your browser, so you can safely paste tokens without sending them to any server.
Frequently asked questions
Does it verify the signature?
No. It decodes (reads) the token; it does not validate the signature, which requires the secret/key.
Is my token sent anywhere?
Never — decoding is done locally in your browser.
Related tools
More from us
