100% Private
All decoding happens in your browser using JavaScript. Your tokens and sensitive claims never leave your device.
Paste a JSON Web Token to instantly decode and inspect its header, payload, and signature. Check expiration status, view all claims, and copy individual sections. Everything runs in your browser.
Paste your JWT token into the input field, or click 'Sample JWT' to load an example token
The token is decoded in real-time as you type, showing the Header, Payload, and Signature sections
Check the expiration status to see if the token is still valid or has expired
Click the copy button on any section to copy the decoded JSON to your clipboard
All decoding happens in your browser using JavaScript. Your tokens and sensitive claims never leave your device.
The token is decoded instantly as you paste or type. No need to click a button — results appear immediately.
Automatically detects the exp claim and shows whether the token is still valid or has expired, with relative time display.
Header, Payload, and Signature are displayed in distinct color-coded sections for easy visual inspection.
No. All decoding happens entirely in your browser using JavaScript. Your token and its claims never leave your device.
A JWT is a compact, URL-safe token format used for securely transmitting information between parties. It consists of three Base64URL-encoded parts separated by dots: a header, a payload with claims, and a signature.
This tool decodes and displays the signature, but does not verify it. Signature verification requires the secret key or public key, which should never be shared in a browser tool.
You can see all standard claims such as sub (subject), iat (issued at), exp (expiration), iss (issuer), aud (audience), and any custom claims included in the token.
Yes. The tool decodes any valid JWT regardless of its expiration status. It also clearly shows whether the token has expired and how long ago.