Loading…
Developer Tools
Decode and inspect JSON Web Tokens (JWTs) — view Base64URL header, payload claims, and signature locally. Inspect expiration timestamps without verifying signatures.
Follow these simple steps to get instant, accurate results directly in your browser:
Paste your encoded token (e.g. eyJhbGciOi...) into the token input field.
View formatted JSON for the token header and claims payload in distinct panels.
Review expiration time and human-readable dates (signature remains unverified).
The JWT Decoder is an in-browser utility that inspects and parses JSON Web Tokens (RFC 7519). It decodes the JOSE header, claims payload, and signature components into formatted JSON without requiring secret keys.
A JSON Web Token consists of three base64url-encoded parts separated by periods: Header (algorithm and token type), Payload (claims such as sub, iss, exp, iat, aud, and custom scopes), and Signature. Our decoder automatically converts UNIX epoch timestamps (exp, iat, nbf) into human-readable local dates and displays token expiration status in real time.
Security Notice: This tool decodes token payload claims locally in browser memory without sending data to servers. It does NOT cryptographically verify the signature, which requires a private or secret key.
Indicates whether token expiration timestamp is in the past or future (signature unverified).
Translates numeric UNIX timestamps into readable local calendar dates.
Indents and displays header and payload objects with one-click copy.
Your access tokens, session keys, and claims never leave your device.
Verify token expiration times and user scopes during OAuth/OpenID Connect integration.
Inspect claims passed between microservices to confirm correct role permissions.
Verify declared algorithms (RS256, HS256, ES256) and inspect payload claims without verification.
Explore complementary utilities for your workflow