Decode and inspect JWT tokens - see header, payload claims (exp, iat, sub), expiry and signature. Decoded in your browser, so tokens never leave your device.
Who Uses JWT Decoder
Developers checking what claims a token actually carries when an API keeps returning 401. Engineers reading the expiry on a token to tell a stale session from a permissions problem. Anyone verifying that a login flow is issuing the roles it should. Support staff inspecting a token a user pasted into a bug report.
JWT Decoder Features
- Instant Decode: Paste a JWT and instantly see the decoded header, payload, and signature
- Expiry Check: Shows when the token expires and whether it's still valid or already expired
- 100% Private: Tokens are decoded in your browser - nothing is sent to any server
- Claim Tooltips: Standard claims (iss, sub, aud, exp, iat) come with a plain explanation
How to Use JWT Decoder
Decode JWT tokens in three simple steps
- Paste Token: Paste your JWT token into the input area
- View Decoded: Instantly see the decoded header, payload and claims
- Inspect Claims: Check expiry, issuer, and all claims at a glance
Frequently Asked Questions
What is a JWT token?
A JSON Web Token (JWT) is a compact, URL-safe way to represent claims between two parties. It consists of a header, payload, and signature separated by dots.
Is my token safe here?
Yes, 100%. The token is decoded entirely in your browser using JavaScript. Nothing is sent to any server.
Can I verify the signature?
This tool decodes the token and shows its contents. For signature verification, you need the secret key and a backend service.
What are JWT claims?
Claims are statements about the user and metadata. Standard claims include iss (issuer), sub (subject), exp (expiration), and iat (issued at).
Why does my token show as expired?
The exp claim contains a Unix timestamp. If the current time is past that timestamp, the token has expired and should be refreshed.
Related: jwt decoder, jwt debugger, decode jwt token, json web token decoder, jwt expiry checker, jwt payload decoder