JWT Decoder
Decode and inspect JWT tokens online
How to Use JWT Decoder
- 1Paste your complete JWT token into the input field.
- 2The header, payload and signature are decoded automatically as you type.
- 3Timestamps (iat, exp, nbf) are shown in both Unix and human-readable formats.
- 4The tool shows whether the token is expired or still valid.
About JWT Decoder
Decode and inspect JSON Web Tokens (JWT) online without login or signup. View the header, payload and signature sections of any JWT instantly. The decoder automatically detects token expiry and formats timestamps for easy reading.
Frequently Asked Questions
Does this tool verify JWT signatures?
This tool decodes and displays the JWT contents but does not verify the cryptographic signature. Signature verification requires the secret key or public key, which should never be pasted into an online tool.
Is it safe to paste my JWT here?
Yes. All decoding happens locally. However, avoid sharing JWTs in public channels as they may contain sensitive claims.
What JWT formats are supported?
Any standard JWT with three dot-separated Base64URL-encoded parts (header.payload.signature) is supported, regardless of the signing algorithm (HS256, RS256, ES256, etc.).