jwt decoder
paste a jwt to read its header, payload and expiry. nothing leaves your browser.
runs on your device · free · no sign-up
loading tool…
frequently asked questions
does it verify the signature?
no. it only decodes the header and payload, which are base64url json. verifying needs the secret or public key.
is it safe to paste a real token?
decoding happens locally and nothing is sent anywhere, but treat tokens as secrets and avoid sharing them.
how are exp and iat shown?
numeric claims iat, nbf and exp are converted to iso dates, and exp shows whether the token has expired.