JWT Decoder
Paste a JSON Web Token to read what it contains, including when it was issued and when it expires.
Your data stays on your device.
Free, no sign-up needed.
Paste a token to read what is inside.
Features
- Header and payload as readable JSON
- Issued, not-before and expiry dates
- Shows when a token has expired
- The token never leaves your device
How to use JWT Decoder
- Paste the token.
- Read the header and payload.
- Copy what you need.
Frequently asked questions
What is a JWT?
A JSON Web Token is a compact piece of text used to prove who you are, often after logging in. It has three parts separated by dots: a header, a payload with the data, and a signature.
Does this check if the token is genuine?
No. Decoding only reads the token. Only the server that holds the secret key can check the signature.
Is it safe to paste my token here?
The decoding happens in your browser and nothing is sent. Still, treat live tokens as passwords: do not share them, and prefer test tokens.
What do iat, nbf and exp mean?
Issued at, not valid before, and expiration time. They are Unix timestamps, which the tool shows as dates.