JWT decoder
Paste a JWT to read its header and payload as JSON, see when it expires in your time zone and check an HS256 or RS256 signature — nothing is sent.
How to decode a JWT
- Paste the token in the box (a leading "Bearer " is fine).
- Read the header, payload and the token's expiry right below.
- To check the signature, enter the secret (HS256…) or a PEM public key (RS256…).
Frequently asked questions
The token is decoded on your own device only: it is not sent anywhere or saved. Still, avoid sharing tokens from live systems with other people.
No. A JWT's header and payload are only Base64-encoded, so anyone with the token can read them; the secret or public key is only needed to check the signature.
HS256, HS384, HS512 (with the secret) and RS256, RS384, RS512, ES256, ES384 (with a "BEGIN PUBLIC KEY" PEM). Other tokens are still decoded, without a signature check.
exp is when the token expires, iat when it was issued and nbf when it becomes valid. The tool turns these numbers into dates in your time zone.
Yes, completely free, with no sign-up.
Related tools
JWT generatorSign a JWT with a secret or a private keyBase64 & URL Encoder / DecoderEncode and decode Base64 and URLsUnix timestamp converterTimestamp ⇄ date, with the current epoch timeMarkdown previewType Markdown, preview it live and get the HTMLHTML to MarkdownTurn HTML or copied content into MarkdownData URI GeneratorTurn files and SVG into embeddable data URIsData URI DecoderView and save files from a data URI or Base64Slug generatorTurn titles into clean URL slugsUUID generatorGenerate random UUID identifiers