All tools

JWT Decoder

Decode and inspect JSON Web Tokens (header, payload, expiry)

How it works

JWT DecoderDecode and inspect JSON Web Tokens (header, payload, expiry). All processing happens in your browser — no upload, no signup, no email required. Free forever.

Frequently asked questions

Is the token sent to your servers?

No. Decoding happens entirely in your browser using JavaScript — the token never leaves your device.

Does this verify the signature?

No. This tool only decodes header and payload. Signature verification requires the secret/public key, which we never request — please use your backend or a JWT library for that.

Why are dates shown in my local timezone?

Standard JWT claims like exp, iat, and nbf are Unix timestamps (UTC). We render them in your browser's local timezone for readability.

Related tools