↑ ↓ to move, Enter to open, Esc to close

JWT Decoder

Decode a JWT to see its header, payload and expiry time. Runs in your browser – tokens are never sent anywhere.

A JWT is a login token made of three Base64 parts: header, payload and signature. Paste one to read what’s inside and check when it expires.

Questions

Is it safe to paste my token here?

Yes – decoding happens in your browser and nothing is sent anywhere. Still, treat live tokens like passwords.

Does it verify the signature?

No. Verifying needs the secret or public key, which you shouldn’t paste into websites.