JWT Decoder
Decode JWT headers, payloads, expiry and claims.
Paste a JWT (JSON Web Token) to decode it. The signature is not verified โ this tool only decodes.
About the JWT Decoder
Decode a JSON Web Token into its header, payload and signature without sending it anywhere. Standard claims like exp, iat and nbf are rendered as human-readable dates with relative expiry, and the algorithm, token type and expired status appear as summary tiles. The signature is displayed but never verified.
How to use the JWT Decoder
- Paste the full JWT โ the three dot-separated parts โ into the input area.
- Read the decoded Header and Payload boxes side by side.
- Check the claims table for dates shown in both ISO format and relative time.
- Look at the Expires tile to see at a glance whether the token is expired.
JWT Decoder FAQ
Does this tool verify the signature?
No. It decodes and displays the signature but does not check it, since verification requires the secret or public key โ always validate server-side before trusting a token.
Is it safe to paste a real token here?
Decoding runs entirely in your browser and nothing is transmitted or logged, but tokens grant access, so the prudent habit is to paste expired or test tokens rather than live ones.
Which claims get human-readable dates?
exp, iat and nbf are converted from Unix seconds into an ISO timestamp plus relative time, and exp additionally drives the Expired indicator.