JWT Decoder
Decode and inspect JSON Web Tokens
How to Use JWT Decoder
- Paste your JWT token in the input
- The header and payload are decoded automatically
- Check token expiration and all claims at a glance
Frequently Asked Questions
What is a JWT (JSON Web Token)?
A JWT is a compact, URL-safe token format used for authentication and data exchange. It has three Base64-encoded parts separated by dots: header (algorithm), payload (claims/data), and signature (verification).
Can this tool verify JWT signatures?
This tool decodes and displays the header and payload. For full signature verification, you need the secret key or public key used to sign the token.
Is it safe to paste my JWT here?
Yes. The token is decoded entirely in your browser โ nothing is sent to a server. However, never share JWTs publicly as they may contain sensitive claims.
Why does my JWT say it's expired?
The payload's "exp" claim contains the expiration timestamp. If the current time is past that timestamp, the token is expired. The tool highlights this so you can quickly diagnose authentication issues.