JWT Decoder
Inspect JWT header and payload locally without verifying its signature.
Free. No signup required.
What this tool does
Decode JWT header and payload locally. Inspect claims and expiry timestamps without uploading the token. Decoding does not verify the signature.
How to use
Paste a token to inspect its header, payload and available time claims.
Features
Inspect token claims and timestamps while keeping the signature-verification warning visible.
When to use it
Debug an expiry claim in a test token you control; never treat the displayed claims as trusted.
Example and checks
This synthetic three-segment example contains only an empty header, an empty payload and dummy signature bytes. It is not a credential. The first two segments are Base64URL-encoded JSON; the signature is not another JSON object. Readable claims, including a future expiry, do not establish authenticity. Inspect test tokens, and perform verification with trusted keys and claim rules in the application.
e30.e30.AA
Header: {}
Payload: {}
Signature: unverifiedCommon questions
Does decoding prove that a JWT is authentic?
Decoding does not verify the token's signature. An expiry date is not proof of authenticity.
Data processing
This tool processes its input locally in your browser without sending it to a server for processing. Input and results are not included in share URLs.
Related tools
JSON Formatter
Format and validate JSON locally in your browser.
Base64 Decode
Decode valid Base64 text locally in your browser.
URL Decode
Decode URL-encoded text locally.
Related guides
JWT Decode vs Verify: What the Claims Can Tell You
Learn what a JWT decoder reveals, why readable claims are untrusted, and how to inspect expiry without confusing decoding with signature verification.
How to Decode a JWT Header and Payload
Read the header and payload of a test JWT, understand its three segments and inspect time claims without mistaking decoding for verification.