Free JWT Decoder Online — Inspect Token Claims
A JWT (JSON Web Token) is a compact, signed token that web apps use to prove who you are after you log in. It has three dot-separated parts — header, payload, signature — and the middle part carries the claims (who you are, when it expires). This decoder reveals those parts so you can debug auth issues. Note it reads the token; it doesn't verify the signature — so never trust an unverified token's claims.
Frequently Asked Questions
- Does this verify the JWT signature?
- No — it only decodes the header and payload. Signature verification requires the secret key, which should never be entered into an online tool.
- Is it safe to paste a JWT here?
- Decoding happens entirely in your browser. However, if the token contains sensitive access credentials, avoid pasting production tokens into any online tool.
- Why is my JWT showing 'expired'?
- JWTs have an 'exp' (expiry) claim that is a Unix timestamp. If the current time is past that value, the token is expired.