Calculator Converter
Developer

JWT decoder

Read the header and payload of a JSON Web Token locally.

Loading tool…

  1. 1 Paste the token.
  2. 2 Read the header and payload.
  3. 3 Check the exp claim yourself if you need to know whether it is expired.
  4. 4 Do not share the token after it is on your screen.

How it works

A JWT has three Base64URL parts: header, payload, and signature. This page decodes the first two and pretty-prints the JSON. It does not check the signature, the expiry, or the issuer. If you paste a live access token, remember it is a credential even though it is readable. Nothing is uploaded.

Frequently asked questions

Does a successful decode mean the token is trusted?

No. Decode only means the text could be parsed. Trust requires verifying the signature with the issuer’s key.

What is the exp value?

It is a Unix time in seconds. The timestamp converter can turn it into a date.

See all

JSON formatter

Pretty-print or minify JSON and see the parse error if it is invalid.

URL encoder

Encode or decode a string for use in a query parameter.

Hash generator

Compute SHA-256 or SHA-1 of text in the browser.

Regex tester

Try a JavaScript regular expression and list the matches.