Developer Essentials · Free Tool

JWT Decoder

Decode a JSON Web Token to inspect its header and payload, with timestamps made human-readable — entirely in your browser. Your token is never sent anywhere.

JWT

Header

—

Payload

—

Signature not verified

—

How it works

A JWT has three Base64URL-encoded parts separated by dots: a header, a payload of claims, and a signature. This tool decodes the first two so you can read them, and turns the standard time claims (iat, exp, nbf) into readable dates. It cannot verify the signature — that needs the secret or public key — so never trust a decoded token's contents without verifying it server-side. Decoding happens entirely on your device.