JWT decoder
Paste a JSON Web Token to read its header and payload, with expiry and issue times in plain dates.
Header
Payload
The signature is not checked. Decoding happens in your browser only; the token is never sent anywhere.
Questions
Does it verify the signature?
No. It only decodes the token so you can read it. Signature checking needs the secret or public key and belongs on your server.
Is it safe to paste tokens or data here?
Yes. These tools run entirely in your browser with no server calls, so what you paste is never sent anywhere. Still, treat production secrets with care and rotate any key you have shared.
Do the tools work offline?
Once a page has loaded, the tool keeps working without a connection.
You may also like
