JWT decoder

Decode and inspect JWT headers, payload claims, and expiry. Timestamps shown as human-readable dates. Token never sent anywhere.

Runs in your browser -- no data sent

Showing example token — paste your own to decode it.

Expired 916d ago(exp: 2023-11-14T23:13:20.000Z)

Headeralg · typ
alg"HS256"
typ"JWT"
Payloadclaims
sub"user_123"
name"Alice Smith"
email"alice@example.com"
role"admin"
iat1700000000(2023-11-14 22:13:20 UTC)
exp1700003600(2023-11-14 23:13:20 UTC)
Signature

SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

Not verified — This tool decodes the token contents but cannot verify the signature. Signature verification requires the secret key. Never trust the contents of a decoded JWT without server-side verification.