# JWT Decoder Decode a JSON Web Token to inspect its header and payload, with timestamps made human-readable — entirely in your browser. Your token is never sent anywhere. ### How it works A JWT has three Base64URL-encoded parts separated by dots: a header, a payload of claims, and a signature. This tool decodes the first two so you can read them, and turns the standard time claims (`iat`, `exp`, `nbf`) into readable dates. It **cannot verify** the signature — that needs the secret or public key — so never trust a decoded token's contents without verifying it server-side. Decoding happens entirely on your device. --- *Source: [ocxly.com/jwt-decoder.html](https://ocxly.com/jwt-decoder.html) — OCXLY, free 100% client-side privacy-first tools. Free JWT decoder. Inspect a JSON Web Token's header and payload with human-readable timestamps, entirely in your browser. Your token is never uploaded. Signature is not verified.*