JWT Decoder
Paste a JWT to inspect its header, payload, and time claims
01
JWT input
Paste a JSON Web Token with three dot-separated parts
The token is decoded locally in your browser and is never uploaded
02
Decoded result
A JWT has three parts: header, payload, and signature
Payload
Tool guide
Paste a complete JWT and select Decode token to view its Base64URL-decoded header and payload, including standard iat, nbf, and exp time claims. This tool only reads token content; it does not validate signatures, keys, or permissions.
- Accepts only three dot-separated JWT parts
- Times are displayed in your browser’s local timezone
- Do not treat decoded data as verified identity or authorization information
FAQ
Does JWT decoding verify the signature?
No. This tool has no key and makes no remote request, so it can only decode the header and payload; it cannot confirm that a token is trustworthy or untampered.
Is my token uploaded or stored?
No. Decoding happens entirely in the current browser; the token is not uploaded, stored, or sent.
Why does the displayed time look wrong?
JWT iat, nbf, and exp are usually Unix timestamps in seconds. The tool formats them in your browser’s local timezone, so also check the timezone.