JWT Decoder
Decode JSON Web Tokens to inspect the header, payload and expiry. Tokens never leave your browser.
No uploads
Valid until 3/17/2030, 5:46:40 PM
Header
{
"alg": "HS256",
"typ": "JWT"
}Payload
{
"sub": "1234567890",
"name": "Localkit",
"iat": 1760000000,
"exp": 1900000000
}- iat
- 10/9/2025, 8:53:20 AM
- exp
- 3/17/2030, 5:46:40 PM
How to use JWT Decoder
- 1Open JWT Decoder. It runs in your browser, no sign-up.
- 2Type or paste your input.
- 3Copy or download the result.
Questions
Is it safe to paste production tokens?
Decoding happens locally; the token is never sent anywhere. Still, treat live tokens like passwords.
Does it verify the signature?
No — verification needs the secret or public key. This tool decodes and checks expiry.
More tools
JSON Formatter & ValidatorPretty-print, minify, validate Base64 Encoder & DecoderText and files Hash GeneratorMD5, SHA-1, SHA-256, SHA-512 Password & UUID GeneratorStrong, random, local Regex TesterLive matches and groups Diff CheckerCompare two texts CSV ↔ JSON ↔ YAML ↔ XMLConvert data formats Cron Expression ExplainerPlain English + next runs