← All tools
Tool
JWT Decoder
Decode
Paste a JSON Web Token to inspect its header and payload claims and check whether it has expired. The signature is not verified — this only shows you what is inside the token, not whether it is authentic.
Decoding happens entirely in your browser — the token is never
sent to a server or stored. Even so, avoid pasting real production
tokens on a device or browser you don't trust, since a JWT payload
often contains personal or session data.