About the JWT Decoder
Paste a JWT to instantly see its decoded header and payload as formatted JSON, with human-readable timestamps for iat/exp/nbf claims and a clear expired/valid indicator. Decoding is 100% local — critical, since tokens are credentials.
Never paste tokens into websites that send them to a server; this tool never does.
How to use the JWT Decoder
- Paste the JWT (xxx.yyy.zzz format).
- Header and payload decode instantly with formatted JSON.
- Check the expiry status and claim timestamps.
Common uses
Debugging authentication issues
Inspecting token claims and scopes
Checking token expiry times
Frequently asked questions
Does this verify the signature?
No — verification requires the secret/public key. This tool decodes and inspects contents, which is what debugging usually needs.
Is it safe to paste real tokens?
Here, yes: decoding is local and the token never leaves your browser. Avoid tools that process tokens server-side.
What are iat, exp and nbf?
Issued-at, expiry and not-before timestamps in Unix seconds — the tool converts them to readable dates.
Related tools
JSON Formatter & Validator
Beautify, validate and minify JSON with clear error locations.
Developer ToolsUUID Generator
Generate cryptographically secure UUID v4 identifiers, in bulk.
Developer ToolsRegex Tester
Test regular expressions live with match highlighting and a cheat sheet.
Developer ToolsMarkdown Editor & Preview
Write Markdown with a live side-by-side HTML preview.
Developer Tools