🎫
JWT Decoder
Inspect a token’s Header and Payload and check whether it has expired.
🔒 Local · no uploadsFree & unlimitedLive decodeExpiry checkDecode-only, no verify
Auto-decodes on paste · does not verify the signature
What is a JWT?
JWT (JSON Web Token) is the most common token format for login auth, made of three Base64URL segments: Header (algorithm), Payload (user data and time claims), and Signature (tamper-proof). When you hit a "401 / token expired" error, paste the token here to quickly see what's inside and whether it has expired.
Security note
Decoding runs entirely in your browser and the token is never uploaded. Keep in mind though: a JWT's Payload is only Base64-encoded and anyone can decode it, so never put passwords, phone numbers or other sensitive information inside a token.