JWT Decoder

Decode and inspect JWT tokens, including header, payload, and expiration time.

Next steps

How to inspect a JWT

Decode a JSON Web Token into readable header and payload data, inspect registered claims, and check whether the exp timestamp has passed.

Steps

  1. 1Paste the complete three-part token into the input area.
  2. 2Select Decode JWT to parse the Base64URL header and payload.
  3. 3Review the algorithm, subject, roles, issued time, and expiration details.

JWT inspection limits

  • Reads standard claims such as sub, iat, exp, and common role fields.
  • Shows the decoded JSON without storing the token in localStorage.
  • Decoding a JWT does not verify its signature or prove that the token is trustworthy.

Processed locally

The JWT is decoded locally in your browser and is not uploaded by the tool. Treat every pasted token as sensitive.