JWT Decoder
Paste a JWT and read what's inside it. A token is just two Base64 chunks of JSON and a signature, so its contents are readable by anyone — this shows the header, the payload, and turns the exp, iat and nbf timestamps into dates you can actually read. It also tells you plainly whether the token has already expired.
Nothing is uploaded — this tool runs inside your browser, so your files never leave your device.
Why use this tool
- Shows the header and payload as formatted JSON
- Converts exp, iat and nbf into readable UTC dates
- Tells you whether the token has expired
- Decoded entirely in your browser — a token is a credential and shouldn't be pasted into someone else's server
How it works
- 1Paste the token into the box above.
- 2Read the header and payload.
- 3Check the expiry line to see whether it's still valid.
JWT Decoder — frequently asked questions
No, and no browser tool can without the secret or public key. This decodes and displays the contents — it does not prove the token is genuine. Never trust a decoded payload for an authorisation decision; verify the signature on your server.
More developer tools
Looking for something else? Browse all developer tools
Explore the other tools
Same deal everywhere on the site — free, no sign-up, and no watermark on anything you download.
Or see every tool on one page.