JWT Decoder
Developer ToolsDecode JWT header and payload and inspect expiry claims.
Runs entirely in your browser — nothing is uploaded
Features
- Splits header, payload and signature into readable panels.
- Renders exp, iat and nbf as human-readable dates with a live countdown.
- Flags expired tokens immediately.
- Decoding is local — never paste production tokens into a server-side tool.
How to use the JWT Decoder
- 1Paste a JWT (with or without the "Bearer " prefix).
- 2Read the decoded header and payload panels.
- 3Check the expiry banner to see whether the token is still valid.
Frequently asked questions
Does this verify the signature?
No. Decoding only reads the Base64URL segments. Use the JWT Inspector for a claim audit, or verify signatures on your server with the real secret.
Is it safe to paste a real token?
Everything runs in your browser and nothing is transmitted, but treat any live token as a credential and rotate it if in doubt.