JWT Decoder

Free · Instant · Private

Encoded token

Paste a token above and hit Decode token to see the breakdown.

Your token

Decode a token to see exp, iat, and other claims interpreted here.

Common claims

What is a JWT?

A compact, URL-safe string that carries claims between parties. It is commonly used for login sessions and API authorization.

Does this verify the signature?

No. This tool only decodes Base64URL segments. Always verify signatures on your server with the correct secret or public key.

Is my token stored?

No. Decoding runs entirely in your browser. Refreshing the page clears the input unless you paste again.

Why is my token expired?

Check the exp claim in the payload. If the current time is past that value, the token should be rejected by your API.

Ctrl + Enter decodes from the text area.