JWT decoder

Decode a JSON Web Token and read its claims, with timestamps as dates and expiry stated plainly. Decodes only — it does not verify the signature.

This tool runs entirely in your browser, which is how your input stays private — and it means it needs JavaScript enabled to work at all. Nothing you paste is ever sent anywhere.

Decoding is not validation. This reads the token's contents; it does not check the signature, so nothing here tells you whether the token is genuine. Everything happens in your browser — the token is never sent anywhere.