toolkitta.

JWT Inspector

Read a JWT's header, claims and expiry locally, with a clear signature-verification warning.

Your token is never uploaded
Paste JWT or open a fileOr start from an example:
Waiting for input

Decoded token

The result appears here as you type.

Ctrl+↵ copy result · Ctrl+Shift+F result to input

How it works

How to use JWT Inspector

  1. Paste a JWT with three dot-separated parts.
  2. Read its header, claims and time status.
  3. Verify the signature in your own application before trusting any claim.
Frequently asked questions

Useful details

3 answers
Does decoding verify the token?

No. A JWT can be decoded without its signing key. This page never establishes authenticity or authorization.

Is the signature sent anywhere?

No. The token stays in your browser and is not stored by this tool.

How is expiry checked?

The exp and nbf numeric claims are compared with your device's current time. Incorrect device time changes that result.

More help

Guides, common conversions and useful next steps.