JWT Decoder Online
Decode JSON Web Tokens into readable header and payload, check expiration and issued-at dates. Decoding happens locally — tokens never leave your browser.
Frequently asked questions
Is it safe to paste my token here?
Yes — unlike many online decoders, this one runs fully in your browser and sends nothing anywhere.
Does the tool verify the signature?
No. Signature verification requires the secret or public key; this tool decodes the payload and checks expiration dates only.
What do exp, iat and nbf mean?
exp — expiration time, iat — issued-at time, nbf — not-valid-before time. All are Unix timestamps in seconds.