Paste a JSON Web Token to instantly view its decoded header and payload, plus a plain-English read on its expiry claims.
🔒 Your token stays on your device and is never uploaded or verified against a server.
Paste a JSON Web Token above to instantly base64url-decode its header and payload. This is a read-only viewer: it does not check the signature, so use it for debugging and inspection, not for trusting a token's authenticity.
The exp, iat and nbf claims are converted to readable dates, with a clear expired/valid status.
Only the header and payload are decoded. The signature is shown as-is and never checked.
Decoding runs entirely in your browser. Your token is never sent anywhere.
A JSON Web Token (JWT) is a compact, URL-safe token made of a header, payload and signature, separated by dots, commonly used for authentication and authorization.
No. This decoder only base64url-decodes the header and payload so you can inspect their contents. It does not check the signature against a secret or public key.
No. Decoding happens entirely in your browser using JavaScript. The token is never sent to a server.
exp is the expiration time, iat is when the token was issued, and nbf is the earliest time the token becomes valid. All three are Unix timestamps in seconds.