JWT Decoder Online
Decode and inspect JSON Web Tokens instantly. View header, payload, and expiry status.
Runs entirely in your browser
Rate JWT Decoder4.9(169 votes)Rate JWT Decoder
Specialized use cases
JWT Expiry Checker - Verify Token Expiration OnlineCheck if a JWT has expired and see exactly when it expires or expired, decoded instantly and locally in your browser.JWT Payload Viewer - Decode Claims OnlineView the decoded header and payload claims of a JSON Web Token instantly, formatted as readable JSON.
How to use JWT Decoder
- 1Paste your JWT (header.payload.signature).
- 2View the decoded header and payload, plus expiry status.
- 3Copy any section as formatted JSON.
Privacy & security
Your token is parsed entirely in the browser — it's never sent to a server, which matters since JWTs are often tied to live sessions.
No token is transmitted or stored.
Frequently asked questions
Does decoding verify the token is authentic?
No. Decoding shows you the claims, which anyone can read — it does not confirm the signature is valid. Verifying authenticity requires the signing secret or public key, which can only be checked server-side.
Why can't this tool verify the signature?
Verifying a signature requires the secret (HS256) or private/public key pair (RS256) used to sign the token. That secret lives on the issuing server, not in your browser, by design.