JWT decoder
Runs only in your browser. Nothing is sent to our servers.
Paste a JSON Web Token to read its header and claims. Expiry and issue times are shown as dates.
Header
Payload
Times
About this tool
The token is decoded as you type, and it stays in your browser. The signature is not verified, because that needs the issuer's key. Do not trust the claims for access decisions based on this view alone.
A leading Bearer is removed, so you can paste the whole Authorization header value.