JWT Decoder

Paste a JSON Web Token to read its header and payload as formatted JSON — algorithm, issuer, subject, scopes and expiry.

Want to keep your input for later? Sign in

How to use it

  1. Paste the full token (three parts separated by dots).
  2. Click Decode.
  3. Read the header and payload; exp and iat are Unix timestamps — check them with the Unix time converter.

Frequently asked questions

Does decoding verify the signature?

No. Decoding only reads the token; anyone can do it. Your server must still verify the signature with the right key before trusting a token.

Is it safe to paste a real token here?

The token never leaves your browser. Still, treat live tokens like passwords: prefer test tokens and revoke any token you share.

Is it free, and is my data uploaded?

It's free with no sign-up, and it runs entirely in your browser — your input is never sent to our servers.