Skip to content

JWT decoder

Decode header and payload locally, explain time claims and clearly mark the signature as unverified.

Runs in your browser; nothing is uploaded

Header and payload are decoded locally. The signature is not verified. Tokens are not stored in the URL or uploaded.

Read JWT claims

JWT decoder reads complete base64url header and payload JSON, reports the algorithm and whether a signature segment is present, and explains exp, nbf and iat time claims against your browser clock. It does not verify a signature, key, issuer, audience or authorization decision.

Privacy and limits

Decoding happens in your browser and makes no network request. The pasted token is not added to the URL, a share link or an export. Decoded claims can contain sensitive data, so only copy them when you intend to share them. Input stops at 100,000 characters.

Up Down to moveEnter to openEsc to close