JWT Decoder & Parser
Paste any JSON Web Token to instantly decode and inspect its header, payload, and signature. Check token expiration status, issued-at time, and all claims. No server-side processing — everything runs in your browser.
How to use
- Paste your JWT into the input box.
- View decoded header and payload instantly.
- Check exp/iat/nbf claims to confirm token validity windows.
- Copy decoded JSON for debugging.
FAQ
Does this verify the signature?
It decodes the token and displays claims. Signature verification requires the secret/public key, which we don't request.
Is it safe to paste tokens here?
Decoding runs locally in your browser. Still, treat tokens like passwords and avoid sharing them publicly.
Why does my JWT look different (URL-safe Base64)?
JWT uses Base64URL encoding. This tool handles typical JWT formats and shows the decoded JSON claims.