Paste a JWT token to decode its header, payload, and inspect expiry. Your token never leaves your browser.
JWT Token
Header
Payload
Standard Claims
Signature
Signature (base64url encoded)
Note: This tool decodes the token but does not verify the signature, as that requires the secret key. Never trust a decoded JWT without server-side verification.