Free • No signup • Works offline
JWT Decoder — Decode & Inspect JWT Tokens Free
Last updated: June 1, 2026
Decode JWT tokens instantly. View header, payload, expiry status. 100% client-side — tokens never leave your browser.
Client-side limitation: This tool only decodes the Base64 contents. It does not verify the cryptographic signature against a secret key.
Expiration Status
How to use this tool
1
1
Paste your encoded JSON Web Token (JWT) into the input box. It should contain two dots separating the three segments.
2
2
The tool will automatically decode the Base64Url strings and display the Header and Payload as formatted JSON.
3
3
Check the Expiration status indicator to quickly see if the token's 'exp' claim has passed the current time.
Frequently Asked Questions
How do you decode a JWT locally?
A JSON Web Token (JWT) is composed of three parts separated by dots: header, payload, and signature. The header and payload are Base64Url encoded. Our secure local JWT decoder simply splits the string and decodes the Base64 in your browser to reveal the underlying JSON data.
Is it safe to view a JWT payload offline?
Yes! It is completely free and works 100% locally in your browser without a backend. Your sensitive tokens are never sent to any server, making it safe for production debugging.
What are JWT claims?
Claims are statements about an entity (typically, the user) and additional data. Common claims include 'iss' (issuer), 'exp' (expiration time), 'sub' (subject), and 'iat' (issued at). They reside in the payload section.
JWT vs Session Token: What's the difference?
A session token is a reference ID stored in a server database, while a JWT is a self-contained token that holds all user information within the token itself (stateless), verified by a cryptographic signature.
How can I check if a JWT is expired?
Look at the 'exp' (expiration) claim in the decoded payload. It represents a Unix timestamp. If the current Unix time is greater than the 'exp' time, the token is expired.
Ad space — AdSense pending approval