← All tools

JWT Decoder

Paste a JSON Web Token to read its header and payload and check whether it has expired.

Decoded in your browser — the token is never sent anywhere. This does not verify the signature, so a token that decodes cleanly can still be forged.

How to use it

  1. Paste the full token, including all three dot-separated parts.
  2. The header and payload are decoded instantly, in your browser.
  3. If the token carries an exp claim, you'll see whether it's still valid.