JWT decoder — view header, payload and expiry
Paste a JWT to read its header and payload, see when it was issued and expires, and verify HS256 signatures.
About JWT decoder
A JWT has three dot-separated parts: header, payload and signature. The first two are Base64url-encoded JSON, so they can be read without a key. This page shows both formatted and turns iat, nbf and exp into dates, telling you whether the token has expired.
For HS256, HS384 or HS512 tokens, enter the secret to verify the signature. Everything happens in your browser.
FAQ
Do I need the key to decode a JWT?
No — the header and payload are readable; the key only verifies the signature.
More tools here
JSON formatter Base64 encode / decode Image ↔ Base64 URL encode / decode HTML entities Hash generator UUID generator Regex tester Cron generator Unix timestamp converter Code formatter Markdown preview Text ↔ binary Color converter Contrast checker CSS gradient JSON to CSV CSV to JSON YAML ↔ JSON JSON to TypeScript AES encryption TOTP generator Password strength checker CSS box shadow CSS border radius Tailwind colors Color palette generator Aspect ratio calculator Chmod calculator