JWT Decoder
Runs locallyDecode JSON Web Tokens locally: inspect the header, payload claims and expiry — the token never leaves your browser.
Related tools
View all (10)JSON Formatter & Validator
Format, validate, beautify or minify JSON instantly — right in your browser.
Base64 Encoder / Decoder
Convert text to Base64 and back, with full Unicode support — all in your browser.
URL Encoder / Decoder
Encode and decode URLs and URI components safely — instantly, in your browser.
UUID Generator
Generate random v4 UUIDs in bulk — cryptographically random, right in your browser.
Unix Timestamp Converter
Convert Unix epoch timestamps to human-readable dates and back — with live current time.
HTML Entity Encoder / Decoder
Encode special characters to HTML entities and decode them back — safe for pasting code into pages.
Paste a JSON Web Token to instantly decode its header and payload. Registered claims (iss, sub, aud, exp, nbf, iat, jti) are explained, and timestamps are converted to readable dates with live expiry status. Decoding happens entirely in your browser — the token is never transmitted. Note: this tool decodes but does not verify signatures.
Frequently asked questions
Does it verify the signature?
No, and deliberately so: verification requires the signing secret or private key, which should never be typed into a website. This tool decodes the header and payload only.
What can I see after pasting a token?
The decoded header and payload, an explanation of registered claims (iss, sub, exp, iat…), human-readable timestamps, and live expiry status.
Is it safe to paste a real token here?
Decoding is pure local Base64URL parsing — the token never leaves your device. Still, treat tokens like passwords: prefer using test or expired tokens on any website.