JWT Decoder
Decode a JWT header and payload, inspect claims and expiry time. Signatures are not verified.
Waiting for a JWT
Paste a token to see the decoded header, payload and claims.
How to use
- 1Paste a JWT into the input, or click Sample to try one
- 2The header and payload are decoded and pretty-printed automatically
- 3Inspect claims such as exp, then copy any section you need
FAQ
Does it verify the signature?
No. This tool only performs Base64URL decoding. In production you must verify signatures on the server with the correct key — a decodable token is not a trusted token.
Why does my token fail to parse?
A standard JWT has three dot-separated parts: header, payload and signature. The first two are Base64URL-encoded JSON. Missing parts, corrupted characters or non-UTF-8 content will cause an error.
Can I use it with production tokens?
Decoding happens locally and nothing is uploaded. JWTs often contain sensitive data, though, so avoid pasting real tokens into shared devices or untrusted pages.
Related tools
JSON Formatter & Validator
Format, minify and validate JSON, compare two payloads path by path, and escape or unescape JSON strings.
Cron Expression Parser
Parse crontab expressions into a plain-language schedule and the next 5 run times.