ToolStack

JWT Decoder

Decode JSON Web Tokens to inspect the header, payload and expiration — without sending the token anywhere.

100% private — everything runs in your browser

How to Use

  1. 1

    Paste a complete JSON Web Token into the left panel.

  2. 2

    Inspect the decoded header and payload on the right.

  3. 3

    Check the expiration status shown above the JSON.

Examples

Typical access token

Input

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9…

Output

Header: {"alg":"HS256","typ":"JWT"} with payload claims and exp

FAQ

Does decoding verify the signature?

No. Only the token issuer with the secret or public key can verify it. This tool shows the raw claims so you can debug them.

Is it safe to paste a real token?

The token never leaves your browser, but a live token is a credential. Debug with test tokens where possible.

What do exp and iat mean?

exp is the expiration time and iat the issue time, both in Unix seconds. The tool compares exp with your clock and shows whether the token is still valid.

Related Tools

Base64 Encoder/DecoderEncode text to Base64 and decode Base64 back to text with full Unicode and emoji support — 100% in your browser.Hash GeneratorCompute MD5, SHA-1, SHA-256 and SHA-512 hashes of any text, entirely in your browser.JSON FormatterFormat, beautify, minify and validate JSON instantly — right in your browser.JSON ValidatorValidate JSON instantly and find syntax errors with the exact line, column and position — right in your browser.URL Encoder / DecoderEncode text for URLs with encodeURIComponent or encodeURI, and decode percent-encoded strings.Unix Timestamp ConverterConvert Unix timestamps to readable dates and back, with seconds and milliseconds support.