JWT Decoder
Decode a JWT's header and payload and check its expiry — locally.
Runs locally · Nothing uploaded
The token is decoded in this tab. It is never sent anywhere and never stored.
Advertisement
About JWT Decoder
Splits a JSON Web Token into its header, payload, and signature, Base64URL-decodes the parts, and pretty-prints the claims. Registered claims like exp, iat, and nbf are translated into human-readable dates with an at-a-glance expired/valid indicator. Decoding does not verify the signature — treat unverified claims accordingly. The token never leaves your browser.
Related tools
EncodingRuns locally in your browser.Base64 DecoderDecode Base64 back to readable text, including UTF-8 content.Date & TimeRuns locally in your browser.Unix Timestamp ConverterConvert Unix epoch timestamps to human dates and back.Security & CryptoRuns locally in your browser.HMAC GeneratorCompute keyed HMAC-SHA256 or HMAC-SHA512 signatures.