← All tools
JWT decoder.
Decodes the header and payload locally. The signature is shown but not verified; you would need the key for that.
Header
Payload
Timing
Signature
About this tool
A JWT is three Base64url segments separated by dots: a header describing the algorithm, a payload of claims, and a signature. This page decodes the first two and lays out the time-based claims (iat, nbf, exp) as readable timestamps with how long ago or how far away they are, so an expired or not-yet-valid token is obvious at a glance.
A leading Bearer prefix is stripped automatically, and five-segment tokens are recognised as encrypted JWEs, which cannot be read without the key. Decoding is not verification: a token that decodes cleanly may still have been tampered with. Nothing you paste here leaves your browser.