ToolBox

JWT Decoder

Decode JWT header and payload into readable JSON, with expiry and issue dates converted to human-readable form. Runs locally — tokens never leave your browser.

How to use

  • Paste the JWT — three parts separated by dots.
  • Inspect the decoded header and payload JSON.
  • Check the expiry date to see whether the token is still valid in time.

What is JWT Decoder?

A JSON Web Token (JWT) is a compact token format used for authentication, made of three Base64URL parts — header, payload and signature — separated by dots.

This tool decodes the header and payload into formatted JSON and converts standard claims such as exp (expiry), iat (issued at) and nbf (not before) into human-readable dates. Decoding happens locally, so pasted tokens never leave your browser.

Note: decoding is not verification. This tool displays the payload contents but cannot confirm the signature is valid for your server. Debug with test tokens only.

Frequently asked questions

Is it safe to paste a JWT here?

The token is only parsed in your browser and never transmitted. Still, a JWT is a credential — make a habit of pasting test tokens, not production ones.

Does this tool verify the signature?

No. Signature verification requires your server's secret or public key. This tool decodes and displays the contents only.

Related tools