JWT Decoder
Decode JSON Web Tokens to inspect header and payload claims, with expiry checking. Nothing leaves your device.
Works offlineDeveloper
This decodes, it does not verify
A JWT's payload is only base64 — anyone can read it, and anyone can forge one without the signing key. Decoding here proves nothing about authenticity. Everything happens in your browser and the token is never sent anywhere, but treat a token you didn't issue as untrusted input.
Token
Paste a token to see its header, payload and expiry.
About the jwt decoder
Paste a token to see its header and payload decoded and pretty-printed, with the standard registered claims explained in plain language. Time claims like exp, iat and nbf are rendered as readable dates alongside a clear indicator of whether the token has expired or is not yet valid. Decoding happens entirely in your browser — the token is never transmitted anywhere.
This tool runs entirely in your browser. Nothing you type is uploaded, and it keeps working with no connection at all — including as an installed app.