JWT Decoder illustration

JWT Decoder

Decodes JSON Web Tokens into their header and payload, pretty-printed with every registered claim (exp, iat, nbf, iss, sub, aud) explained and expiry checked against your clock — without sending the token anywhere.

Runs 100% in your browser — nothing you paste leaves your device.

Notes

  • Decoding does not verify the signature: the header and payload are just Base64Url-encoded JSON, readable by anyone who holds the token.
  • Never paste production tokens into online tools that send them to a server — this one runs entirely in your browser.
  • Runs 100% in your browser — nothing you paste leaves your device.

Explore the idea

This interactive demo needs JavaScript.