Home / JWT Decoder
JWT Decode
Paste a JWT (JSON Web Token) and it decodes and shows the contents (header and payload).
JWT（
xxxxx.yyyyy.zzzzz) here.What is a JWT?
A JWT (JSON Web Token) is a token format widely used in authentication and APIs.header.payload.signature — these three parts are each Base64URL-encoded and joined with dots (.). The payload holds information (claims) such as the user ID and expiration.
How to use
Paste a JWT and it formats and displays the header and payload JSON.exp (expiration) / iat (issued-at) / nbf (not-before) — if present, they're shown as human-readable dates.
Note: this tool only displays (decodes) the contents — it does not verify the signature. Anyone can read a JWT's contents, so never put secrets such as passwords in it. Everything runs in your browser and tokens are never sent anywhere.
FAQ
Does it verify the JWT's signature?
No. This tool is decode-only, showing the contents in a readable form; it does not verify the signature's validity. Verification requires the signing key.
Is the token sent anywhere?
No. Decoding happens entirely in your browser, and the token you paste is never sent or stored.
Can I see the expiration?
If the payload has exp, it's shown as a date and we tell you whether it has expired.
Is it free to use?
Yes — free and no sign-up required.