How to decode a JWT
Inspect a JSON Web Token's header and payload, and see when it expires — without sending it anywhere.
📥
1. Paste the token
Drop in a JWT from a request header or cookie.
🔍
2. Read the claims
See the decoded header and payload as formatted JSON.
⏰
3. Check expiry
Issued-at and expiry times are shown in plain language.
JWTs carry authentication and authorization data between services, encoded as three Base64url segments. Decoding them helps you debug logins, check scopes and claims, and confirm expiry. This decoder runs entirely in your browser and does not verify or store tokens, so it's safe for sensitive values. Decode plain Base64 with the Base64 tool.