JWT decoder
Paste a JSON Web Token to view its decoded header and payload and see whether it has expired. Decoding only — no signature verification. Runs locally.
Loading tool…
What the JWT decoder shows
It Base64URL-decodes the header and payload segments, pretty-prints them as JSON, and translates the iat, nbf, and exp claims into readable timestamps.
Why decode a JWT
Inspecting a token's claims is invaluable when debugging authentication — you can confirm the subject, scopes, issuer, and expiry without extra tooling.
Decoding, not verification
This tool reads the token's contents but does not check the signature. It cannot tell you whether a token is authentic — only what it claims.
Safe and local
Tokens are decoded in your browser. Nothing is transmitted, so you can safely inspect tokens without leaking them to a third party.
How to jwt decoder
- Paste the full JWT (header.payload.signature) into the input pane.
- Click Convert to decode the header and payload.
- Review the claims and the expiry status.