Back to home

JWT Decoder

Inspect header and payload, read expiry claims (signature is not verified)

JWT
0 chars0 segments

FAQ

What does decoding a JWT reveal?

The header and payload are only Base64Url-encoded, so anyone can read claims such as sub and exp. The signature guards against tampering, not eavesdropping.

Is my token leaked here? Can signatures be verified?

Decoding happens entirely in your browser and the token is never sent anywhere. This tool only decodes; signature verification needs the secret key and belongs on the server.