Decode and inspect JSON Web Token header, payload and signature
Paste any JWT token to instantly decode the header and payload and inspect every claim, including an automatic Valid/Expired badge based on the exp claim and the issued-at (iat) timestamp. Decoding happens entirely in your browser — the token is never sent to a server.
🔒 Decoding happens entirely in your browser — no data is sent to any server.
Frequently Asked Questions
Decoding happens entirely in your browser — no data is sent to any server.
This tool decodes header and payload only. Signature verification requires the secret key.
Yes — if the token has an exp claim, the tool shows a Valid or Expired badge with the exact expiration time, plus the issued-at (iat) time when present.
Any standard JWT. The header and payload are just Base64URL-encoded JSON, so decoding works the same regardless of which service issued the token.