JWT Decoder
Decode a JWT header and payload into readable JSON and inspect exp, nbf, and iat times. Tokens are processed only in browser memory and are not sent to a network or storage.
Token status summary
Decode a JWT to see its algorithm and time status.
Time claims
| Claim | Raw value | UTC | Local time |
|---|---|---|---|
| exp, nbf, and iat appear here when present. | |||
How to use
A JWT has three dot-separated segments: header, payload, and signature. This tool base64url-decodes the first two and displays them as JSON.
exp is the expiration time, nbf is the not-before time, and iat is the issued-at time. Expiration and activity indicators compare numeric values with the browser's current time and are for reference only.
Security decisions require a trusted server to verify the algorithm, signature, issuer, audience, and application policy.
Frequently asked questions
Does successful decoding prove that a JWT is valid?
No. This tool only makes the contents readable; it does not verify the signature, issuer, audience, or security validity.
Is the entered JWT kept on a server or in browser storage?
No. Input is processed only in this page's memory and is not sent to or stored in the network, logs, cookies, or localStorage.
How are expiration times displayed?
exp, nbf, and iat NumericDate values are shown in both UTC and the browser's current local time.