JWT Decoder
Decode JWT tokens and inspect header, payload and expiry.
About this tool
Processing happens directly in your browser. No files are uploaded to the server.
JWT Decoder splits a JSON Web Token into its three parts β Header, Payload and Signature β and pretty-prints the JSON. It highlights key claims like exp (expiry), iat (issued at) and sub, and shows whether the token is expired.
How to use
- 1 Paste your JWT token into the input box.
- 2 Click Decode to split it into header and payload.
- 3 Check the expiry badge β green = valid, red = expired.
- 4 Copy individual sections as needed.
Frequently asked questions
Does it verify the signature?
No. Verification requires the secret key. This tool only decodes β it does not validate.
Is it safe to paste my token here?
Processing happens locally in your browser. However, avoid pasting tokens containing sensitive data in shared environments.
What is JWT used for?
JWTs are used for authentication and information exchange β typically as Bearer tokens in APIs.
Can it decode any JWT?
Yes, as long as the token uses standard Base64URL encoding.