Utilities

JWT Decoded token

Decode JSON Web Tokens locally in your browser without storing them.

This tool only decodes. It does not verify the signature.

ExpiresJanuary 1, 2030 at 1:00:00 AM
Issued atNovember 14, 2023 at 11:13:20 PM
Time until expiryin 1,174 days
StatusNot expired

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "Astroworld",
  "iat": 1700000000,
  "exp": 1893456000
}
signature

About JWT Decoder

Paste a JSON Web Token and the decoder splits it into header, payload and signature, turns the Base64 parts into readable JSON and shows when the token was issued and when it expires. Decoding happens in your browser. The tool doesn't verify the signature, so it can't tell you whether a token is genuine.

Frequently asked questions

Is decoding a JWT the same as verifying it?

No. Decoding only reveals the contents. Verification checks the signature against the issuer's key and is the only thing that proves the token wasn't tampered with.

Can I decode an encrypted JWE?

No. A JWE has five parts and an encrypted payload, while this tool only reads signed tokens with three parts.