JWT Decoder
Decode a JWT's header and payload, and check expiry.
JWT
Decoding only — this tool does not verify the signature or trust the token.
Decoded
About the JWT Decoder
Paste a JSON Web Token to decode its header, payload, and raw signature. Standard time claims like iat and exp are shown as human-readable dates, with a warning if the token has expired. This tool decodes only and does not verify the signature.
Examples
Decode sample token
eyJhbGciOiJIUzI1NiJ9...Output
{"sub":"1234567890","name":"John Doe","iat":1516239022}Related tools
Base32 Encoder
Encoders & Crypto
Encode or decode text using RFC 4648 Base32.
Base64 Encoder
Encoders & Crypto
Encode or decode text to/from Base64, UTF-8 safe.
HTML Entity Encoder
Encoders & Crypto
Encode or decode HTML entities in text.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
URL Encoder
Encoders & Crypto
Encode or decode strings using encodeURIComponent/encodeURI.
AES Encrypt/Decrypt
Encoders & Crypto
Encrypt or decrypt text with AES-GCM and a passphrase.
Frequently asked questions
Read more
- Understanding JWT: structure, claims and safe verification
What is actually inside a JSON Web Token, which claims matter, and why decoding a JWT is not the same as verifying it.
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser