Decode header · payload · claims
JWT decoder
Paste a JSON Web Token to inspect its header and payload. Decoding happens in your browser — your token is never uploaded.
Examples
Frequently asked questions
Does this verify the JWT signature?
No. It decodes and displays the header and payload for inspection; it does not verify the signature, so never trust a token based on this alone.
Is my token sent to a server?
No. Decoding happens entirely in your browser.
What do iat and exp mean?
iat is the issued-at time and exp is the expiry, both Unix timestamps. The tool shows them as readable dates and whether the token has expired.