JWT Decoder

Decodes a JWT's header and payload and checks its expiry.

Lilu Baba's JWT Decoder reads a token's header and payload locally in your browser and flags whether it has expired — nothing is sent to any server.

How to use this tool

  1. Paste your JWT token.
  2. Its decoded header, payload and expiry status update instantly — all locally in your browser.

JWT Decoder — frequently asked questions

No — this only decodes the readable header and payload; it doesn't verify the signature (which requires the secret or public key).

No — decoding happens entirely in your browser using standard base64url decoding. Nothing is sent to our servers.