JWT Decoder
How to Use
Paste a JWT to decode header and payload as JSON. exp/iat/nbf claims show human-readable times and expiry status.
Signature is displayed only — not cryptographically verified. Do not paste production tokens on untrusted sites.
FAQ
- Does decoding mean the token is valid?
- No. Decoding reads content only; signature verification requires server secrets.
- Is my data uploaded?
- No. All decoding happens in your browser; tokens are never sent to a server.