JWT Decoder
Decode JWT header and payload, with expiry check.
How to use
- Paste the JWT.
- Header and payload decode instantly.
- Check the expiry verdict.
Frequently asked questions
Is the signature verified?
No - decoding shows contents only. Verification requires the secret/key and belongs on your server.
Is it safe to paste tokens here?
Decoding is local, but treat production tokens as secrets - prefer expired or test tokens.