JWT Decoder

Decode JWT headers and payloads locally, inspect expiry claims, and keep tokens off the server.

JWT input

Header

Payload

Expiry display

This token does not include an exp field.

No expiry claim

Add your JWT token into the input editor.

Decode the header and payload directly in your browser.

Check the token algorithm, type, and header metadata.

Inspect claims like subject, issuer, roles, and expiry.

See whether the token is active or expired.

JWT data stays in your browser and is not sent to a server.

Add your JWT token into the input editor.

Decode the header and payload directly in your browser.

Check the token algorithm, type, and header metadata.

Inspect claims like subject, issuer, roles, and expiry.

FAQ

What information does JWT decoding show?

It decodes the header and payload sections and shows the raw JSON content plus expiry and issuer claims.

Can I verify the token signature?

HS256 signature verification is supported when a secret is provided; RS256 shows the key ID for reference.

Is JWT decoding free?

Yes, completely free and done locally in your browser.

Is my token sent to a server?

No, decoding happens entirely in your browser so your tokens stay private.

What happens if a token is expired?

The tool still decodes the payload and flags the expiry claim so you can inspect it.