JWT Decoder
Inspect JWT headers, claims and expiry.
Decoding is not verification. This tool reads the header and payload — which are only Base64URL-encoded, never encrypted — but it does not check the signature. Treat any token you paste anywhere as compromised, and never paste a production token you still rely on.
About this tool
Decode JSON Web Tokens locally to inspect the header and payload, with human-readable timestamps and expiry checks.
It runs completely in your browser — no input is sent anywhere, so it is safe to use with data you would not paste into a hosted service.