JWT Decoder

Inspect JSON Web Tokens from your app or API. The token is decoded in your browser, so it is safe to paste real tokens.

Runs in your browser. Nothing is uploaded Free, no sign-up Works on mobile

JWT token

Valid until 14/10/2027, 5:46:40 pm (523363 minutes left).

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Ravi Kumar",
  "role": "admin",
  "iat": 1792000000,
  "exp": 1823536000
}

Claim	Meaning	Value
sub	Subject	1234567890
name	Name	Ravi Kumar
role	Role	admin
iat	Issued at	14/10/2026, 5:46:40 pm (1792000000)
exp	Expires	14/10/2027, 5:46:40 pm (1823536000)

Algorithm: HS256. The signature is not verified here because that needs the secret or public key. Decoding happens in your browser, so the token is never sent anywhere.

How to use JWT Decoder

Paste the JWT (with or without “Bearer”).
Read the header, payload and claims.
Check the expiry status.

Frequently asked questions

Does this verify the signature?

No. Verifying needs the secret or public key. This tool only decodes the readable parts.

Are JWTs encrypted?

Normal JWTs (JWS) are only signed and encoded, so anyone can read the payload. Never put passwords or sensitive data in them.

Is my data sent to a server?

No. Everything runs in your browser, so API keys, tokens, configs and customer data never leave your machine.

Related tools

All Developer Tools →