Skip to content

JWT Decoder — Read Token Header, Payload & Expiry

Decode a token to see what is actually inside it. Timestamps are converted to readable dates, and the expiry is checked against your clock.

Token

Decoding happens in this page. Your token is never sent to us or to anyone else — but remember a JWT is a credential, so avoid pasting production tokens into any website.

What this does

  • Header and payload decoded from base64url
  • exp, iat and nbf shown as dates, with expiry state
  • Signature is shown but not verified — that needs the secret
  • Nothing is uploaded — your token never leaves this page

Looking for an API to try it against? Browse APIs that need no key — you can call those straight from this page.

We use cookies only to measure traffic and, in future, to show ads. Nothing is stored until you choose, and you can change your mind at any time. Read our privacy policy.