JWT Decoder

Inspect a JWT locally in your browser, pretty-print the header and payload, and convert common timestamp claims into readable dates. This tool decodes tokens but does not verify trust or signatures.

Decode token

Paste a compact three-part JWT. The signature segment is shown as text only and is not validated.

Token details

This decoder reads the token structure only. It does not verify the signature, issuer, audience, or whether the token should be trusted.

Algorithm

HS256

Type

JWT

Subject

1234567890

Expiration

No exp claim

Header


        

        

          

            
Payload

            
          

          

        

      


      

        
Time claims

        

          

            
Issued at (iat)

            
Not present

          

          

            
Not before (nbf)

            
Not present

          

          

            
Expires (exp)

            
Not present

          

        

      


      

        
How it works

        
A JWT normally has three Base64URL-encoded segments separated by dots: header, payload, and signature. This page decodes the first two segments, parses them as JSON when possible, and shows common claims such as iat, nbf, and exp in your local time.

        
Important limitation

        
Decoding is not the same as verification. The signature must be checked by your application or identity provider using the correct key material. Treat the payload as untrusted until it has been verified elsewhere.

        
Reference structure

        
JWTs follow the JSON Web Token compact serialization format defined by the JOSE standards. The typical wire format is header.payload.signature.