Decode a JWT, header, payload, signature

Inspect tokens locally; expiry made readable.

No uploads. No accounts. Runs in your browser.

Loading tool...

About this tool

Paste a JWT and see its header, payload and signature in three labelled panes, with exp, iat and nbf timestamps translated into readable dates and an at-a-glance expired/valid note. Purely for debugging, the signature is not verified.

This matters more than it sounds: a live JWT is a credential, and most online decoders send it to their server. This one decodes entirely in your browser.

How it works

  1. Paste your input, or drop a text file onto the box.
  2. The output updates live as you type.
  3. Copy it to the clipboard, or download it as a file.

Related tools