JWT Decoder Online
Paste a JSON Web Token to inspect it: see the header, payload and signature parts, read the claims in formatted JSON, and check whether the token is expired — all in your browser, nothing is uploaded.
Token parts
Header
Payload
Common claims
How to use
- Paste a JWT token into the input box.
- Click Decode. The token is split into its three parts and the header and payload are shown as formatted JSON.
- Read the expiry verdict: valid, expiring soon or expired, plus the exact expiry date and time.
- Use the Copy buttons to copy the header or payload JSON.
Important notes
- This tool decodes only; it does not verify the signature. A signature part being present does not mean the token is authentic. Verify signatures in your own backend with the correct secret or public key.
- Never paste tokens with real secrets into any website. This page is fully client side, but treat tokens as passwords.
- Expired tokens are only a guide: servers may apply extra rules such as clock tolerance.