JWT Decoder — Inspect Token Header and Payload
Decode a JWT header and payload, pretty-print the claims, and convert exp, iat and nbf to readable dates with expiry status.
Processed locally in your browser. Nothing is uploaded.
How to use
- Paste a JWT.
- Review the header, payload and time claims.
- Copy what you need.
Example and rules
Example: exp: 1767225600 is shown as 2026-01-01 00:00 UTC with an expired or remaining-time label.
- Decodes only; the signature is not verified.
- Supports three-part JWS tokens, not encrypted JWE.
- Tokens never leave the browser, but avoid pasting production credentials on shared computers.
Frequently asked questions
Why not verify the signature?
Verification needs a secret or public key, and pasting secrets into web pages is risky.
Is the JWT payload encrypted?
Standard JWTs are only Base64URL-encoded and readable by anyone.
Is the token uploaded?
No. Decoding is entirely local.