JWT Decoder
Decode a JSON Web Token to read its header and payload, with expiry dates in plain language.
About JWT Decoder
This JWT decoder reads a JSON Web Token and shows its decoded header and payload as formatted JSON. Paste the token, which has three parts separated by dots, and it explains the claims, converting exp, iat and nbf timestamps into readable dates with a clear badge showing whether the token has expired.
It is useful for developers debugging login flows, API authentication and OAuth tokens. Decoding happens in your browser and nothing is sent anywhere, though it is still wise not to paste live production tokens into any tool. The signature is not verified. The decoder is free and needs no sign-up.
How to use JWT Decoder
- Paste a JWT (three parts separated by dots).
- Read the decoded header and payload.
- Check the exp, iat and nbf dates and the expiry badge.
Frequently asked questions
Is the signature verified?
No. Verifying needs the secret or public key, so this tool only decodes. Never trust a token's contents on the server without verifying its signature.
Is it safe to paste my token here?
Decoding happens in your browser and nothing is sent anywhere. Still, treat live tokens like passwords and avoid sharing them.
What do exp, iat and nbf mean?
exp is when the token expires, iat when it was issued and nbf the time before which it must not be accepted — all in Unix seconds.
What is a JSON Web Token?
A JWT is a compact token made of a header, a payload of claims and a signature, used to pass identity and permissions between a client and a server.
How do I decode a JWT?
Paste the token and the header and payload are Base64URL-decoded and shown as readable JSON.
Is a JWT encrypted?
Usually not. Standard signed JWTs are only encoded, so anyone can read the payload; do not put secrets in it.
People also search for
jwt decoder online · jwt decode online free · jwt decoder · jwt decode · jwt online decoder · decode token online · decode jwt online · decode token jwt · json web token · what is json web token · json web token decode · how to jwt decode