JWT Decoder

Paste a JSON Web Token to instantly decode its header and payload. Expiry status is shown automatically.

About this JWT Decoder

This free JWT decoder lets you inspect the header and payload of any JSON Web Token without needing the secret key. It also shows whether the token has expired based on the exp claim. No data is sent to any server.

FAQ

Does this verify the JWT signature?

No. Signature verification requires the secret key or public certificate. This tool only decodes (base64url-decodes) the header and payload for inspection.

Is it safe to paste my JWT here?

Everything runs locally in your browser — nothing is sent to a server. That said, avoid pasting production tokens containing sensitive data into any online tool as a general security practice.