← ToolsEncoders
JWT decoder.
Read a JWT header and payload offline with expiry checks. Signatures are decoded, never verified here.
{
"alg": "HS256",
"typ": "JWT"
}{
"sub": "1234567890",
"name": "Jaskaran",
"exp": 2000000000,
"iat": 1700000000
}The signature is decoded, never verified here — always verify server-side with your secret or JWKS.
🔒 Privacy — runs 100% locally
No uploads · no cookies · works offline after load. View Source if you don't believe it.
How to use.
- Paste the full token — header and payload decode instantly.
- Watch the exp chip: green means live, red means expired, with relative time.
- Copy the payload JSON for your debugger.
Related tools.
Encoders
Base64 encode
Encode and decode text or files with UTF-8 support and URL-safe mode. Auto-updates as you type.
Formatters
JSON formatter
Pretty-print, minify and validate JSON with exact error pointers. Pasted text never leaves this tab.
Converters
Timestamp converter
Unix seconds or milliseconds to ISO, UTC and relative time — with automatic unit detection and bulk rows.
FAQ.
Do you verify the signature?
No — and that's deliberate. Verification needs your secret/JWKS server-side. This tool only decodes.
Is pasting a JWT here safe?
It never leaves your tab, but tokens are credentials: prefer decoding test tokens, and treat production tokens as passwords.