JWT Decoder
Read a token’s header, payload and expiry. Decoded in your browser, never uploaded.
Paste a token to read its header, payload and expiry. Tokens are decoded locally and never uploaded, but treat live production tokens as secrets anyway.
Runs entirely in your browser. Nothing you enter is sent to a server, saved, or logged.