Read a JWT's header, claims and expiry locally, with a clear signature-verification warning.
The result appears here as you type.
Ctrl+↵ copy result · Ctrl+Shift+F result to input
No. A JWT can be decoded without its signing key. This page never establishes authenticity or authorization.
No. The token stays in your browser and is not stored by this tool.
The exp and nbf numeric claims are compared with your device's current time. Incorrect device time changes that result.
Guides, common conversions and useful next steps.
Use the action beside a finished result to send it directly, or open another tool: