⟐

JWT Decoder

Decode JSON Web Tokens and inspect header, payload, claims and expiry. Runs locally — your tokens never leave your browser.

Valid until 3/17/2030, 5:46:40 PM

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Toolora",
  "iat": 1700000000,
  "exp": 1900000000
}

The signature is not verified. Decoding happens entirely in your browser.

{ }

JSON FormatterValidate and pretty-print JSON.

⏱

Unix Timestamp ConverterConvert Unix timestamps to dates and back.

⌗

Hash Generator (SHA-256, SHA-512)SHA-1, SHA-256, SHA-384 and SHA-512 for text and files.

What is the jwt decoder?

Decode a JSON Web Token to inspect its header, payload, claims and expiry time. Tokens are decoded locally, so they are never exposed to a server.

How to use the JWT Decoder

Paste your JWT.
Read the decoded header and payload.
Check whether the token has expired.

Common uses

Debugging login and API authentication
Checking user claims and roles
Verifying token expiry

Frequently asked questions

Does it verify the signature?

No, it only decodes. Verifying a signature requires the secret or public key.

Is it safe to paste my token?

Everything runs locally in your browser — nothing is uploaded or stored.

What is the exp claim?

The expiry time as a Unix timestamp. After that time the token should be rejected.

Also known as: decode jwt, jwt parser, jwt token decoder, jwt inspector, jwt expiration checker, json web token decoder.

More tools