JWT Decoder
Free online JWT decoder. Inspect header, payload and expiry of JSON Web Tokens — decoding only, no secrets required, nothing transmitted.
FAQ
Does decoding verify the signature?
No — verification needs the secret key and should happen on your server. This tool decodes for inspection only.
Is it safe to paste tokens here?
Decoding is local-only. Still, never paste production tokens from active sessions into any tool.
What does exp mean?
The expiration timestamp — the tool shows it as a readable date and flags expired tokens.