JWT Decoder

Paste a JSON Web Token to see its header and payload, with timestamps like exp and iat converted to readable dates and a clear expired or valid indicator.

Free, no sign-up
Runs locally in your browser

Your files are processed on this device and are never uploaded to a server.

How to use the JWT Decoder

1
Paste a JWT.
2
Read the decoded header, payload and expiry.

Decoding is not verifying

Anyone can decode a JWT; the payload is only Base64URL-encoded. Decoding does not prove the token is authentic. Signature verification requires the secret or public key on your server.

Frequently asked questions

Is my data sent to a server?

No. Everything runs in your browser as you type. Nothing is uploaded or logged, so it is safe to paste API responses, tokens and private text.