Paste a JWT (JSON Web Token) below to instantly see its decoded Header and Payload as readable JSON.
Epoch timestamps in claims like exp and iat are automatically converted to human-readable dates, so you can tell at a glance whether a token has expired.
Tip: click the dedicated "Decode JWT" button in the toolbar above for one-click decoding with automatic timestamp conversion.
Results are provided for informational purposes only and may contain errors. Please verify important information independently. Use of this tool is at your own risk.
No - this decodes the header and payload only, which doesn’t require the secret key. It does not verify whether the signature is valid.
The token is decoded for this single request and not stored. As with any JWT debugging tool, avoid pasting tokens containing live production secrets you don’t control.
A valid JWT has exactly three dot-separated parts (header.payload.signature). Double check you copied the entire token, including all three segments.