JWT decoder
Inspect token headers, payloads and expiry.
Loading / 加载中
Your input is processed on this device.
How to use
Paste a three-part JWT to decode its header and payload locally. Signature verification requires a separate cryptographic verification step. Treat the decoded claims as untrusted input.
Example
An exp value of 1704067200 corresponds to 2024-01-01 UTC.
Good to know
Where is my data processed?
Your browser performs the operation. Input stays in page memory. Markdown draft saving is available when you explicitly enable it on this device.
How should I verify decoded claims?
Verify the signature with the expected algorithm and key in your authentication system, then validate claims such as issuer, audience and expiry. This tool displays the decoded header and payload.
What does the exp value mean?
exp is an expiry time expressed in Unix seconds. For example, 1704067200 corresponds to 2024-01-01 at midnight UTC.