JWT Decoder: The Complete Guide
Paste a JSON Web Token (JWT) to instantly read its decoded header and payload. Timestamp claims like iat and exp are shown in human-readable form — all in your browser.
How to use the JWT Decoder
- Paste or type your code, text, or data into the input box.
- Adjust options such as indent size, dialect, or flags when the tool offers them.
- The output updates instantly — copy it to your clipboard or download the file.
Features
- Decodes header & payload JSON
- Human-readable iat / exp / nbf
- Flags expired tokens
- Runs locally — tokens never uploaded
Why use this tool
- Debug auth flows quickly
- Inspect claims and scopes
- Safe — sensitive tokens stay on your device
What is a JWT?
A JSON Web Token (JWT) is a compact, URL-safe token with three Base64URL parts — header, payload, and signature — used for authentication and authorization. This decoder reads the header and payload so you can inspect claims. It does not verify the signature, which requires the issuer's secret or public key.