JWT Decoder
Paste a JWT and instantly see its decoded header, payload, and expiration status.
About this tool
Debugging authentication issues often means inspecting what's actually inside a JWT — without a decoder, that means manually Base64-decoding two segments of the token by hand. Paste any JWT here and instantly see its header (algorithm and token type) and payload (claims) as syntax-highlighted, readable JSON.
The decoder automatically reads standard time claims — iat (issued at), exp (expiration), and nbf (not before) — converts them to human-readable dates, and shows a clear status banner telling you whether the token is currently valid, expired, or not yet active.
What this tool doesn't do
Decoding is not the same as verifying. This tool reads the token's contents but cannot check the signature, since that requires your server's secret or public key — always verify signatures server-side before trusting a token's claims.