JWT Decoder
Read the header and payload of a JSON Web Token, and see when it expires.
- 100% free
- Token never leaves your browser
Last reviewed by the OnlineToolPro team
Decoded entirely in your browser — the token is never sent anywhere. This tool doesn't verify the signature.
Paste a JSON Web Token to see its header and payload.
What is the JWT Decoder?
A JWT is a login or API token made of three parts. This tool decodes the header and payload so you can read the claims inside — including when it expires — without sending the token anywhere.
How it works
How to use the JWT Decoder
3 simple steps. No experience needed.
What can you use it for?
- Check which user or permissions a token contains.
- Find out why an API rejects a token (for example, it has expired).
- Debug login flows during development.
FAQ
Frequently asked questions
Does it verify the signature?
No. Verifying needs the secret or public key, which should stay on your server. Decoding only reads the contents.
Is it safe to paste a real token?
It isn't sent anywhere, but treat live tokens like passwords and avoid sharing your screen while they're visible.
Related tools
Other tools you might find useful next.
More Developer Tools
Format, convert and check code and data. 9 free tools.