JWT Decoder

How to Use

Paste a JWT to decode header and payload as JSON. exp/iat/nbf claims show human-readable times and expiry status.

Signature is displayed only — not cryptographically verified. Do not paste production tokens on untrusted sites.

FAQ

Does decoding mean the token is valid?
No. Decoding reads content only; signature verification requires server secrets.
Is my data uploaded?
No. All decoding happens in your browser; tokens are never sent to a server.