Skip to content

JWT Decoder

Paste a JWT token to decode header and payload. Expiry and validity are shown. No signature verification.

Header
Payload
Expiry:

Example

A JWT has three parts (header.payload.signature) in Base64URL. Paste a token and click Decode to see the header and payload as JSON. If the payload contains exp, we show the expiry time and whether the token is still valid.

FAQ

No. We only decode and display contents. Signature verification is not performed.
No. Decoding is done entirely in your browser.

Security Tools