JWT Decoder
Decode and inspect JSON Web Token header and payload.
Decode a JSON Web Token to inspect its header and payload, with issued and expiry timestamps shown in human-readable form. Decoding happens locally — your token is never sent anywhere.
Runs entirely in your browser — nothing is uploaded.
How to use the jwt decoder
- 1Paste your JWT.
- 2Review the decoded header and payload.
- 3Check the exp / iat timestamps in plain English.
Frequently asked questions
Does this verify the signature?
No — verifying a signature requires the secret or key. This tool decodes and displays the token's contents only.
Is my token sent to a server?
No. Decoding is done entirely in your browser, so it's safe for sensitive tokens.