ToolGenie

JWT Decoder

Decode and inspect a JWT.

Loading tool…

How to use JWT Decoder

  1. Paste your JSON Web Token into the field.

  2. Read the decoded header and payload, shown as formatted JSON.

  3. Check the expiry, issued-at and not-before times in the claims summary.

Frequently Asked Questions

Does this verify the signature?

No. Verifying needs the signing secret or public key, which should never be pasted into a website. This tool decodes the token so you can read its claims.

Is it safe to paste a real token?

Decoding happens in your browser and nothing is transmitted or logged. Even so, treat any live token as a credential and revoke it if you are unsure.

What do exp, iat and nbf mean?

They are Unix timestamps: exp is when the token expires, iat when it was issued and nbf the earliest moment it may be used. All three are shown as readable dates.

Related tools

Base64 Encode / DecodeEncode and decode Base64 text.Hash GeneratorHash text or files with MD5 and SHA.Timestamp ConverterConvert Unix time to dates and back.UUID GeneratorGenerate UUID v4 and v7 in bulk.JSON FormatterBeautify, validate and minify JSON.

Looking for something else? Browse all developer tools.