JWT Decoder

Decode a JWT locally to inspect its header and payload, and see when it was issued and when it expires. The signature is not verified.

Runs locally. Your data never leaves this tab.

Encoded token

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "user_123",
  "name": "Ada Lovelace",
  "role": "admin",
  "iat": 1760000000,
  "exp": 1791536000
}

Decoding is not verification. Always verify the signature on your server before trusting any claim.