01 / Fast steps
- Paste a JWT (header.payload.signature).
- Run the tool.
- Review the decoded header, payload and expiry status.
JWT Decoder
Paste a JSON Web Token to instantly decode its header and payload and check whether it has expired.
Updates instantly as you type
02 / Best for
- Debugging an API authentication flow.
- Checking whether an access token has expired.
- Inspecting claims issued by an identity provider.
03 / Why here
- Decodes entirely in your browser, the token never leaves your device.
- Surfaces exp, iat and nbf claims as readable dates.
- Flags expired tokens immediately.
04 / Keep in mind
- This tool only decodes the token, it does not verify the signature.
Tool connections
Related tools
01Favicon GeneratorTurn any image into a complete favicon set: ICO, PNG sizes, apple-touch-icon, web manifest and ready-to-paste HTML.02JSON FormatterFormat and validate JSON for debugging, APIs and config files.03SQL FormatterFormat and beautify SQL queries with proper indentation and keyword casing, right in your browser.04JSON to TypeScriptGenerate TypeScript interfaces from JSON, with nested types, optional fields and union detection.05JSON to YAMLConvert JSON into clean, readable YAML for configs, pipelines and Kubernetes manifests.06YAML to JSONConvert YAML configs and manifests into formatted JSON, with clear errors on invalid syntax.
Good to know
Questions & answers
01Does this verify the token signature?
No, it only decodes the header and payload. Verifying the signature requires the secret or public key, which this tool never asks for.
02Is my token uploaded anywhere?
No, decoding runs entirely in your browser and the token never leaves your device.
03Is JWT Decoder free to use?
Yes, JWT Decoder is completely free, with no sign-up and no usage limits. It runs entirely in your browser, so your data never leaves your device.