JWT Decoder
Paste a JWT to read its decoded header and payload, with issued-at and expiry times.
How to use it
- Paste your token A full JWT with header and payload.
- Read the sections Header and payload are shown as JSON.
- Check the dates Issued-at and expiry are converted to readable times.
Examples
| header | alg, typ |
|---|---|
| payload | sub, name, iat |
About this tool
JSON Web Tokens encode their header and payload as base64url, which is compact but unreadable at a glance. This decoder splits the token and shows the header and payload as formatted JSON, so you can quickly check the claims inside.
It also converts the standard issued-at and expiry timestamps into readable dates and flags expired tokens. Decoding never verifies the signature — that must happen on your server with the signing key — and nothing you paste leaves your browser.
Frequently asked questions
Does this verify the token?
No. It only decodes the header and payload so you can inspect them. Verifying the signature requires the secret or key and should be done server-side.
Is my token sent anywhere?
No. Decoding happens entirely in your browser, so the token never leaves your device.
Related tools
Updated June 13, 2026