JWT Decoder
Decode a JSON Web Token’s header and claims and see when it expires.
Runs on your device. Files are never uploaded.Good to know: Treat real tokens as secrets. This tool does not send them anywhere, but avoid pasting production tokens into any website you do not trust.
How to use JWT Decoder
- Paste the token
- Read header, payload and times
- Copy what you need
About this tool
Paste a token to read its header and payload, human-readable issue and expiry times and a warning for unsigned tokens. The token never leaves your browser.
Like every tool on YantraStack, it is free with no accounts, limits or watermarks, and it works offline once the page has loaded. See how to verify that nothing is uploaded.
Questions
Does it verify the signature?
No. Verification needs the secret or public key. Decoding only shows what the token claims.
Guides
How to verify that an online tool never uploads your files
A one-minute test using your browser’s Network tab shows whether a PDF or image tool really keeps your files on your device, and what to look for.
JWTs explained: what is inside a token and mistakes to avoid
What the three parts of a JSON Web Token contain, why decoding is not verifying, and the security mistakes developers make most often with JWTs.
Base64 encoding and decoding: what it is and how to do it
Learn what Base64 is for, why it is not encryption, and how to encode or decode text with Unicode and URL-safe options.