🎫 JWT Decoder
Decode JWT header and payload with expiry time (local only, no signature check)
✓ Runs entirely in your browser — your data never leaves this device
About This Tool
Decode a JWT's header and payload locally and display the expiry time — handy for debugging sessions and permission issues. Note: decode only, no signature verification.
How to Use
- Paste the full JWT (three dot-separated parts)
- Header and payload are decoded automatically
- Check the exp field to see if the token is still valid
FAQ
Can it reveal secrets?
JWT payloads are Base64-encoded, not encrypted — this tool just decodes them. That is exactly why secrets should never go into a JWT.
Does it verify the signature?
No. Signature verification requires the server-side key.