🎫 JWT Decoder
Paste a token and see its Header / Payload at a glance, with automatic checking of whether exp has expired. Parsed entirely locally.
FAQ
Does this tool verify the signature?
No. Signature verification requires your secret key; this tool only decodes and displays the token — which is exactly how JWT is designed: the Payload is only Base64URL-encoded, so anyone can decode and read it. Don't put sensitive information in it.
How do I read the expiry time?
The exp claim in the Payload is a timestamp in seconds. This tool automatically converts it to a date and tells you whether it has expired.