JWT Decoder
Paste a JSON Web Token to read its header and payload as formatted JSON — algorithm, issuer, subject, scopes and expiry.
Want to keep your input for later? Sign in
How to use it
- Paste the full token (three parts separated by dots).
- Click Decode.
- Read the header and payload; exp and iat are Unix timestamps — check them with the Unix time converter.
Frequently asked questions
Does decoding verify the signature?
No. Decoding only reads the token; anyone can do it. Your server must still verify the signature with the right key before trusting a token.
Is it safe to paste a real token here?
The token never leaves your browser. Still, treat live tokens like passwords: prefer test tokens and revoke any token you share.
Is it free, and is my data uploaded?
It's free with no sign-up, and it runs entirely in your browser — your input is never sent to our servers.