JWT Decoder
Inspect JSON Web Tokens correctly, including base64url and UTF-8. This tool decodes but never verifies signatures.
JSON Web Token
Decode only This is not verification.
The header, payload, and signature are decoded for inspection only. No signature is checked, no key is used, and
no network request is made. Never trust a token just because this tool displays its claims.
Decoded token
Header
Payload
Signature (raw base64url, not verified)
Time claims
Timestamps are shown in your local time zone. exp marks the expiry, nbf the earliest valid
time, and iat when the token was issued. Clock skew and server-side checks are outside this tool's
scope.
About JWT Decoder
Decode JWT header, payload, and signature with claim timestamps and expiry warnings.
This tool runs locally in your browser. It does not upload your input, require an account, or store your data on a server. If a feature needs a network request, the interface asks before sending anything.