JWT Decoder

Decode JWT header and payload

JWT token

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Ada Lovelace",
  "iat": 1716239022,
  "exp": 1747775022
}

Registered claims

subSubject1234567890

iatIssued at1716239022 — 5/20/2024, 9:03:42 PM (past)

expExpires1747775022 — 5/20/2025, 9:03:42 PM (past)

⚠ Signature is NOT verified — decoding only proves structure, not authenticity.

Loading tool…

About the JWT Decoder

Decode JSON Web Tokens (JWT) instantly: paste a token to see its header, payload, and registered claims (iss, sub, exp, iat) with human-readable expiry times. Decoding is local and the signature is never verified or sent anywhere — safe for debugging auth flows with real tokens.

How to use

1Paste a JWT (three dot-separated Base64URL parts).
2Read the decoded header and payload JSON.
3Check exp/iat claims with local-time conversion.

FAQ

Does it verify the signature?

No — it only decodes. Never trust a JWT's contents without server-side signature verification.

Related Encoding & Crypto tools

MD5 / SHA Hashes UUID Generator Password Generator QR Code Generator BCrypt Generator HMAC Generator

JWT Decoder is part of DevKit — 100 free, privacy-first tools for developers, students, and everyone, built by Minhazul Ashim. Everything runs in your browser; your data never leaves your machine.