🔒
Your Privacy Protected – your token is decoded locally in your browser and never sent anywhere.
About the JWT Decoder
A JSON Web Token (JWT) has three parts joined by dots: a header, a payload and a signature. The first two parts are just Base64URL-encoded JSON, so anyone can read them. This tool splits the token and decodes those parts for you.
Common time claims are shown in plain language: exp (expires), iat (issued at) and nbf (not before). If the token is expired, you will see a clear warning.
Is anything uploaded? No. Decoding happens fully in your browser. Because tokens can be sensitive, this matters: your JWT never leaves your device.