Developer
JWT Decoder
Decode a JWT header and payload, and show when it was issued and when it expires. The signature is not checked.
Free forever.
The signature is not checked. This only reads the header and payload.
How to read a JWT
- Paste the token. Spaces around it are ignored.
- Read the header, the payload and the expiry in your local time.
- Treat the result as information only. This page does not verify the signature.
Questions
Does a successful decode mean the token is trusted?
No. Anyone can make a token with any payload. Trust it only after the system that holds the secret or public key has checked the signature.
Is the token uploaded?
No. Decoding happens in the browser. A token is still a credential, so avoid pasting a live one on a shared screen.
This runs entirely in your browser. Nothing you type is sent to a server.