FlinkTools

JWT decoder

Read a JSON Web Token’s header and payload, with every date in plain words.

Processed on your device, never uploaded

Never paste production tokens into websites. This one is decoded on your device and isn’t sent anywhere.

Result
The header, claims and expiry appear here.
Show

What it does

A JWT decoder reads the header and payload of a JSON Web Token and turns exp, iat and nbf into dates you can read. The token never leaves your browser.

How to use it

  1. 1Paste a token.
  2. 2Read the claims and when it expires.
  3. 3Optionally check the signature with your secret.

Questions

Is it safe to paste a token here?

It is decoded on your device, but avoid pasting production tokens anywhere.

Can it verify the signature?

For HS256, paste the secret. RS256 needs the public key.

Why is my token rejected?

Check exp: an expired token is refused by every server.

AD320 × 100