Security
JWT Decoder
Decode a JSON Web Token and read its header and claims, with human-readable timestamps and a live expiry check. Decoding only — the signature is never verified and the token never leaves the page.
Decode only. This tool reads a token's contents; it does not verify the signature, so it cannot tell you whether a token is authentic. Nothing you paste is sent anywhere — but treat production tokens carefully wherever you paste them.
Token
header payload signature
Registered claims
Header
Payload
Runs entirely in your browser — nothing you type here is uploaded, logged or stored. Privacy policy