JWT Decoder
Decode and inspect JWT tokens. View header, payload, and signature info instantly in your browser.
How to Use
- Paste your JWT token (in the format
xxxxx.yyyyy.zzzzz) into the input field. - The tool instantly decodes the Header and Payload sections into readable JSON.
- Check the expiry badge to see if the token is still valid based on the
expclaim.
Frequently Asked Questions
- What is a JWT?
- JWT (JSON Web Token) is a compact, URL-safe token format used for authentication and information exchange. It consists of three Base64URL-encoded parts: Header, Payload, and Signature.
- Is my token safe to paste here?
- Yes — all decoding happens entirely in your browser. Your token is never sent to any server.
- Does this tool verify the signature?
- No. Signature verification requires the secret key. This tool only decodes the structure of the token for inspection purposes.
- What does the expiry badge mean?
- If the payload contains an <code>exp</code> claim, the tool compares it to the current time and shows whether the token is still valid or has expired.