Tool reference

JWT Decoder

beta

Decode JWT tokens into their header, payload, and signature parts. Inspect all claims with descriptions, check expiry status, and see Unix timestamps rendered as human-readable dates.

Open tool Back to docs

Quickstart

Use this when you want the shortest path from input to a useful result.

Paste a JWT token into the input area on the left.

The header and payload panels appear immediately on the right.

Check the expiry indicator to see if the token is still valid.

Best for

Common situations where this tool fits naturally into the workflow.

Inspect access tokens returned by OAuth and OIDC providers to debug auth flows.
Verify claim values like sub, aud, and exp without running code.
Check whether a token is expired before filing an auth bug report.

Common tasks

Concrete ways this tool is typically used in day-to-day workflows.

Inspect OAuth access token claims

Paste the bearer token from an Authorization header. The payload panel lists all claims with plain-English descriptions for standard ones like iss, sub, aud, exp, and iat.

Check token expiry

The expiry indicator below the input turns red and shows 'Token is expired' when the exp claim is in the past.

Read human-readable timestamps

Unix epoch values in exp, iat, and nbf claims are automatically rendered as UTC timestamps below each value.

Examples

Real inputs and outputs that show how the tool behaves.

Decode a signed JWT

Paste any JWT — the header shows the algorithm, the payload shows all claims.

Encoded token

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkFyY2ggRGV2IiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

Decoded payload

{
  "sub": "1234567890",
  "name": "Arch Dev",
  "iat": 1516239022
}

Features

What this tool includes and what each capability is for.

Live decode

Token decodes as you type — no submit button.

Expiry check

Instant expired / valid indicator based on the exp claim.

Claim annotations

Standard JWT claims include plain-English descriptions.

Per-claim copy

Copy any individual claim value with one click.

Workflow

Follow this path to get from input to output quickly.

Paste the full JWT string (including header.payload.signature) into the input.

Review the header panel for algorithm and token type.

Review the payload panel for all claims and their values.

Check the expiry status indicator.

Click any claim value to copy it to clipboard.

Caveats and tips

Things to keep in mind before relying on the output in a larger workflow.

Caveats

This tool decodes tokens — it does not verify signatures. Treat decoded payloads as informational only.
Never paste production tokens with sensitive PII or secrets into third-party tools.
Signature verification requires the signing secret or public key, which is not supported here.

Tips

Use the load sample button to see a fully annotated example token.
Click any claim value to copy it instantly.
The signature panel shows the raw base64url signature segment for reference.