JWT Decoder: Read a Token Header and Payload
Decode a JSON Web Token in your browser to read its header, payload and expiry time. It does not verify the signature.
Paste a token to see its header and payload. The signature is not checked, so a decoded token is not proof that it is real. Do not paste live production tokens into any website you do not trust.
Frequently asked questions
- Is a JWT encrypted?
- A normal signed JWT is only encoded. Anyone with the token can read the payload, so never put secrets in it.
- Does this check the signature?
- No. Checking needs the secret or public key. This tool only decodes.
- What are exp, iat and nbf?
- exp is when the token expires, iat when it was issued and nbf the time before which it is not valid. They are Unix timestamps in seconds.
More tools
Code formatters
CSS beautifier CSS minifier HTML beautifier HTML minifier JavaScript beautifier JavaScript minifier JSON formatter YAML formatter XML formatter SQL formatter Markdown preview
Converters
Base64 encoder and decoder URL encoder and decoder Unix timestamp converter CSV to JSON JSON to CSV HTML entity encoder and decoder Number base converter Time zone converter JSON to TypeScript XML to JSON HTML to Markdown Date difference calculator
Text tools
Regex tester Remove duplicate lines Lorem ipsum generator Word counter Case converter Text diff checker
Color and images
Color converter Contrast checker Image to Base64 Image resizer
Network
Subnet calculator Download time calculator Common ports list CIDR to IP range IPv6 address expander and compressor MAC address formatter curl command builder
Server and files
Cron expression explainer chmod calculator HTTP status codes
Encoding and security
Password generator UUID generator Hash generator QR code generator Password strength checker Wi-Fi QR code generator