JWT decoder

Paste a JSON Web Token to read its header, payload and time-based claims. Nothing leaves your browser.

This tool only decodes. It does not verify the signature, so don't trust a token's contents just because it decodes. Treat tokens like passwords: anyone holding a valid one can use it.