JWT Decoder

Paste a JWT to inspect header, payload and signature. Expiration is shown in human-readable form when present.

Designed to process supported files locally in your browser.

How to use JWT Decoder

  1. Paste a JWT.
  2. Decode.
  3. Inspect header, payload and claims.

How it works

Base64URL segments are decoded and formatted as JSON. Signature is displayed but not verified.

Privacy

Your files are processed in your browser and are not uploaded to ToolBoxy servers.

JWT Decoder FAQ

Does this verify the signature?

No. Decoding does not verify authenticity.

Is my token uploaded or stored?

No. Nothing is sent or saved.

What does exp mean?

Unix timestamp of expiration; shown as a date and whether it has passed.