Question 1

How do I decode a JWT token?

Accepted Answer

Paste your JWT token into the input field and click Decode (or just paste it — it auto-decodes). The tool splits the token into its three parts (header, payload, signature), decodes the base64url-encoded header and payload, and displays them as formatted JSON.

Question 2

Is it safe to paste my JWT token into an online decoder?

Accepted Answer

Yes, this decoder runs 100% in your browser using JavaScript. Your token is never sent to any server. However, you should never share JWT tokens publicly as they may contain sensitive claims.

Question 3

How do I check if a JWT token is expired?

Accepted Answer

Paste your JWT token and the decoder automatically checks the 'exp' (expiration) claim in the payload. It compares the expiry timestamp to the current time and shows a green 'VALID' badge with time remaining, or a red 'EXPIRED' badge showing how long ago it expired.

JWT Decoder — Inspect Token Online

Header

Payload

Signature

Need more tools?