Decode and inspect JSON Web Tokens (JWT) instantly — view header claims, payload data, and expiration status. No signature verification needed, and your token never leaves your browser.
How to Use JWT Decoder
- 1Paste your JWT token into the input box
- 2Header and payload sections decode instantly with all claims
- 3View human-readable timestamps for exp, iat, sub, and iss claims
- 4Check token expiry status (expired or valid)
- 5Never paste production tokens in public — this tool is 100% client-side and private
Features
- Decode JWT header, payload, and signature into pretty-printed JSON
- Human-readable timestamps for exp and iat claims with expiry detection
- Color-coded claim types for quick visual scanning
- Completely client-side — tokens never sent to any server
Frequently Asked Questions
Does this verify the JWT signature?
No. Decoding reads the Base64-encoded payload without verifying the signature. To verify a JWT, use your backend with the secret or public key.
Is it safe to paste my JWT here?
Since this tool is purely client-side, your token is not sent anywhere. However, avoid pasting production tokens in shared or public environments as a general security practice.
What are the parts of a JWT?
A JWT has three Base64URL-encoded parts separated by dots: Header (algorithm info), Payload (claims data), and Signature (cryptographic signature).