JWT decoder
Inspect a JSON Web Token's contents and expiry without sending it to a website's server.
How to use the JWT decoder
- Paste the token.
- Read the decoded header and payload.
- Check the issued and expiry times.
When it's useful
- Debugging login problems
- Checking token expiry
- Seeing which claims an app sends
Limits to know
- Decoding does not verify the signature, so it can't tell you whether a token is genuine.
Your privacy
Everything is worked out in your browser. What you type isn't uploaded, saved or shared, and there's no sign-up.
Questions
Is it safe to paste my token here?
The token is decoded in your browser and never sent anywhere. Still, treat live tokens like passwords.