Advertisement
JWT Decoder
Decode and inspect JSON Web Tokens locally, header, payload and expiry claims.
Loading JWT Decoder… If nothing happens, please enable JavaScript.
About JWT Decoder
JSON Web Tokens (JWT) are a compact, URL-safe means of representing claims between two parties. They are widely used for authentication, single sign-on and stateless API authorization.
This tool decodes the header and payload of a JWT entirely in your browser. The signature is shown but not verified, verifying requires the issuer's secret or public key, which you should never paste into any online tool.
Frequently asked questions
Does this verify the signature?
No. Verification requires the secret/public key. We deliberately do not accept secrets to keep the tool safe to use on production tokens.
Is my token sent anywhere?
No. Decoding happens entirely in your browser; the token never leaves your device.
What does iat / exp / nbf mean?
iat = issued at, exp = expiration time, nbf = not before. All are seconds since the Unix epoch and we humanize them automatically.
Advertisement