JWT Decoder
Paste a token to inspect its header and payload. Everything stays in your browser.
Free, no signup needed. Runs 100% in your browser.
Loading…
How to use this tool
- Paste your JWT.
- Read the decoded header and payload.
- Check expiry claims.
Frequently asked questions
Is my token sent to a server?
No. Decoding is fully client-side. Still, avoid pasting production secrets into any web page.
Does it verify the signature?
No. It decodes the payload so you can inspect claims. Verify signatures on your server.
Why does a token look expired?
The exp claim is a Unix timestamp in UTC, so compare it to the current UTC time rather than your local clock alone.
Related tools
Need a website for this?
Describe your idea once and BYOB plans, builds, and deploys your site.
Embed this tool
Paste this snippet to show this tool on your own site.