Skip to content
Leandro Lima

JWT decoder & validator

Decode header and payload, inspect claims and check expiry.

Formatting & validation100% client-side

Token

—

Recent

Nothing here yet.

About this tool

Paste a JSON Web Token to see its header and payload decoded, with the registered claims resolved into readable form: issued-at, not-before and expiry are shown as local dates alongside a live verdict on whether the token is currently within its validity window.

Decoding is not verification. This tool reads the token's contents and checks its structure and timestamps; it does not verify the signature, because doing so would require the signing key. Treat a decoded token as untrusted input until your backend has verified it.

How to use it

  1. 1Paste the full token — three base64url segments separated by dots.
  2. 2Read the decoded header and payload panels.
  3. 3Check the claims summary for expiry and validity window.

Privacy

This tool runs entirely in your browser. Nothing you type or paste is sent to a server, and your local history is stored only on this device.

Related tools