Debug token claims
Inspect standard claims such as iss, sub, aud, and exp during development.
JWT Token Decoder
JWT Token Decoder
Read a JWT's Base64URL header and payload as JSON, including standard claims and expiration timing.
Key features
- Checks the dot-separated header.payload.signature structure.
- Decodes Header and Payload into formatted UTF-8 JSON.
- Organizes the iss, sub, aud, exp, iat, nbf, and jti standard claims.
- Shows an exp Unix-seconds value as local date and remaining expiration time.
How to use
- Paste a three-part JWT.
- Review the Header, Payload, and standard claims.
- Copy the JSON or original signature segment you need.
Examples
Check token expiry
Convert exp to a local date while investigating session expiration.
Privacy
JWT Base64URL decoding and claim interpretation run in your browser.
Requirements
The signature segment is not verified, so decoded content does not establish token authenticity.
Common questions
- Does it verify that the JWT signature is valid?
- No. It only Base64URL-decodes the header and payload; the signature is not verified, so decoded content is not proof of authenticity.
- Can I see the expiry as a readable date?
- When exp is a Unix-seconds value, it shows the browser-local date and time remaining or expired state.
Related tools
- Base64 Encoder & DecoderEncode UTF-8 text and files as Base64, or decode strings and data URIs back into text or files.
- HMAC Message Authentication Code GeneratorCalculate a SHA-family HMAC from a message and secret key, then view the result as Hex or Base64.
- JSON Formatter and ValidatorFormat, minify, sort, and validate JSON with clear syntax error locations.
- Unix Timestamp ConverterConvert Unix seconds or milliseconds to local or UTC dates, and convert date input back to both timestamp units.