Back to tools
Header/Payload Expiry time Local decode

JWT Decoder

Decode the Header and Payload of a JWT locally, view issued/expiry times, no network calls and no signature verification.

Share:
Privacy protection: All operations run locally in your browser. Your data is never uploaded to any server, keeping your privacy and data safe.
📥 Enter JWT
📋 Header / Payload
Paste a JWT and click Decode.

Technical References

  1. JWT — RFC 7519: https://www.rfc-editor.org/rfc/rfc7519

Frequently Asked Questions

Does it verify the signature?

No. It only decodes the Header and Payload — the result doesn't mean the token is valid.

Which claims are supported?

Common claims such as exp (expiry), iat (issued at), nbf (not before), sub, and iss are shown automatically.

How is Base64URL handled?

The -/_ characters and padding are handled automatically — no manual conversion needed.

Is my token safe?

It is parsed only locally and never uploaded; still, avoid pasting production tokens into untrusted environments.

Technical References

  1. JWT — RFC 7519: https://www.rfc-editor.org/rfc/rfc7519