Free online. No signup, no email required. Get results on this page.
Paste a JWT (JSON Web Token) below to instantly see its decoded Header and Payload as readable JSON.
Epoch timestamps in claims like exp and iat are automatically converted to human-readable dates, so you can tell at a glance whether a token has expired.
Tip: click the dedicated "Decode JWT" button in the toolbar above for one-click decoding with automatic timestamp conversion.
🛡️Secure & Private: Your data is processed, then deleted right away. Nothing is logged or saved.
Preview
⏳DOCX / XLSX: after clicking "Convert", please wait about 15 seconds for the file to finish being fully generated before clicking "Download" — the Download button will stay disabled and count down until it's ready.
📄 DOCX / PDF / RTF are document containers — pick which text format gets written inside them with the extra "Content" dropdown (e.g. keep it as JSON, or write XML/CSV/YAML text instead).
Input
Ready
Lines: 0Words: 0Chars: 0Size: 0 KB
Input statistics are available via the Stats button above this field.
Output
Lines: 0Words: 0Chars: 0Size: 0 KB
Output statistics are available via the Stats button above this field.
Results are provided for informational purposes only and may contain errors. Please verify important information independently. Use of this tool is at your own risk.
Is this tool free?
Free online. No signup, no email required. Get results on this page.
How do I get my result?
Use the tool on this page. Your result appears here; no email delivery is required.
Frequently Asked Questions
Does this verify the JWT signature?
No - this decodes the header and payload only, which doesn’t require the secret key. It does not verify whether the signature is valid.
Is my token sent anywhere or stored?
The token is decoded for this single request and not stored. As with any JWT debugging tool, avoid pasting tokens containing live production secrets you don’t control.
What if I get "Invalid JWT format"?
A valid JWT has exactly three dot-separated parts (header.payload.signature). Double check you copied the entire token, including all three segments.