/jwt-decoder
Writer & Dev

JWT Decoder Online: Decode & Inspect JSON Web Tokens

Paste any JSON Web Token to inspect its header, payload, expiry and signature. Everything is decoded locally in your browser — nothing is ever sent to a server.

Runs in your browser — your text is never uploaded or stored.
Header
{
  "alg": "HS256",
  "typ": "JWT"
}
Payload
{
  "sub": "1234567890",
  "name": "Ada Lovelace",
  "iat": 1516239022
}
Signature
SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
iat: 1/18/2018, 1:30:22 AM

How to Use

  1. 1.Paste your JWT into the input box.
  2. 2.Read the parsed header and payload with expiry information.
  3. 3.Copy any decoded field — nothing is uploaded.
Advertisement

FAQ

Does it verify the signature?

No. Verifying a JWT signature requires the issuer's secret or public key. This tool only decodes the token so you can inspect what's inside.

Is my token sent to a server?

No — decoding runs entirely in your browser. JWTs often contain secrets, so keeping them local is important.

What if my token is expired?

If the payload has an exp claim, the tool converts it to your local time and warns you when the token has already expired.

Related tools

More text utilities