JWT Decoder
Decode the header and payload of a JSON Web Token and check the expiry claim. The signature is shown, not verified.
Frequently asked questions
- Is the signature verified?
- No. Verification needs the secret or public key; this tool only decodes.
- Is it safe to paste a token?
- Decoding happens locally, but treat real tokens as secrets and avoid pasting them into any website.