Free Developer Utility
JWT Decoder
Paste a JSON Web Token to inspect its header, payload, and signature. Registered claims (sub, iss, aud, exp, iat, nbf) are labeled, and expiry / not-before status is checked — all in your browser, no upload.
Free Developer Utility
Paste a JSON Web Token to inspect its header, payload, and signature. Registered claims (sub, iss, aud, exp, iat, nbf) are labeled, and expiry / not-before status is checked — all in your browser, no upload.
Decoding never checks authenticity on its own. To confirm a token is genuine, enter the shared secret above — HS256 verification runs via the Web Crypto API. RS256/ES256 tokens need a public key and are decode-only here. Everything runs in your browser; no token or secret is uploaded.