JWT Decoder: Read a Token's Header, Payload and Expiry
Debugging a login problem? Paste a JSON Web Token to see its header and payload in readable form and check whether it has expired.
Open the free JWT Decoder →What is the JWT Decoder?
Decode a JSON Web Token's header and payload and check its expiry. It's completely free, needs no sign-up and works on any phone or computer.
Why it's helpful
- Decodes header and payload instantly
- Shows the expiry time in human-readable form
- Runs locally, so tokens aren't sent to a server
Who it's for
Developers working with authentication and APIs.
How to use it
- Paste a token (with or without “Bearer”).
💻 Open source: this tool is free and open source (MIT License). View the code on GitHub, download it and run it offline.
The bigger picture: Developer
Developers lose a surprising amount of time to small tasks: formatting data, decoding tokens, converting between formats and checking syntax. Fast in-browser tools keep you in flow and keep sensitive data off third-party servers.
What's changing: AI coding assistants now write a lot of code, but developers still need quick, trustworthy tools to inspect and verify what comes out: formatters, validators and decoders matter more, not less.
Frequently asked questions
Is it safe to paste my token?
It is decoded in your browser and never sent anywhere. Still, avoid sharing production tokens.
