JWT Decoder
Privacy First: Your files are processed securely. Whenever possible, processing happens in your browser and files are never stored on our servers.
Paste any JSON Web Token and decode it into its three parts. The header shows the algorithm (HS256, RS256, ES256, etc.) and token type. The payload lists all claims with human-readable descriptions for standard ones (iss, sub, aud, exp, iat, nbf, jti) and formatted timestamps for exp/iat/nbf. A live expiry badge shows whether the token is valid, expired (with how long ago), or not yet active. The signature section can be revealed or hidden. Copy any individual claim value with one click. Note: signature verification requires a secret key - this tool only decodes, it does not verify. All processing is client-side.
How to Use
- 1Paste your JWT token in the input box
- 2Click Decode JWT to split and decode the token
- 3Review the Header (algorithm and type), Payload (all claims with descriptions), and Signature sections
- 4Check the expiry badge at the top to see if the token is valid, expired, or not yet active
- 5Click the copy icon next to any claim to copy its value
Features
- Decodes any JWT into header, payload, and signature sections
- Algorithm badge with color coding (blue for HMAC, purple for RSA, teal for ECDSA)
- Expiry badge: shows 'Valid · expires in Xh Ym', 'Expired X min ago', or 'Not yet valid'
- Timestamps for exp, iat, nbf shown as both Unix timestamp and human-readable local time
- Standard claim descriptions (iss, sub, aud, exp, iat, nbf, jti) shown inline
- Signature reveal/hide toggle for security
- Copy any individual claim value with one click
- 100% browser-based - no token data is uploaded or stored
Frequently Asked Questions
Community Feedback
Like
Total Rating
No ratings yetReviews
No reviews yet. Be the first!
Rate & Review
Was this tool helpful?
Rate this tool:
Write a Review