JWT decoder
Paste a JSON Web Token to inspect its header and payload and check its time claims. Decode only — signatures are never verified, and everything happens locally in your browser.
Token
Paste a token above — the header and payload decode live as you type. Both 3-segment (signed) and 2-segment (unsigned) tokens are supported.
This token has a signature, but it is not verified — this tool only decodes.
This is an unsigned token (two segments) — it carries no signature.
Header
Payload
Time claims
- iat — issued at
- nbf — not before
- exp — expires
This payload has no usable exp/nbf claims, so there is no time-based validity window to check.
Dates are shown in UTC. Time claims that are not numbers are treated as absent — the raw payload above still shows them.