JWT Decoder
Paste a JSON Web Token to see its decoded header and payload as formatted JSON, with expiry (exp) and issued-at (iat) timestamps translated to readable dates. Decoding happens entirely in your browser — the token is never sent anywhere, which matters because JWTs often carry live session credentials. Note: this decodes, it does not verify the signature.
JWT
Frequently asked questions
No. Decoding runs entirely in your browser using JavaScript. That matters more for JWTs than for most data — a live token is a credential, and pasting it into a tool that uploads it would be a real security risk.