Security
Free Online JWT Decoder
Decode JSON Web Tokens entirely in your browser. Inspect header, payload, expiration and signature status without verification or server uploads.
100% Client-Side. Your data is processed locally and is never sent to an ElDevo processing server.
Input
Output
Ctrl/Cmd + Enter to run · Esc to clear · Processing stays in your browser.
Advertisement
How to Use
- 1Paste a JWT into the token field.
- 2Inspect the decoded header and payload.
- 3Review expiration and issued-at timestamps.
- 4Remember that decoding is not signature verification.
Features & Privacy Guarantee
- ✓ Header and payload decoding
- ✓ Human-readable exp/iat timestamps
- ✓ Signature presence/status indicator
- ✓ No token upload
Search intent: Inspect JWT header, payload and timestamp claims without uploading the token.
Technical Example
Input
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.…
Output
Header: { "alg": "HS256", "typ": "JWT" }Frequently Asked Questions
Does decoding verify a JWT signature?
No. This tool decodes the token locally. It does not possess your signing key and does not cryptographically verify the signature.
Can I decode an expired JWT?
Yes. The payload is still decoded, and the expiration status is shown separately.
Is my JWT uploaded?
No. Token processing is performed in the browser.
What do exp and iat mean?
exp is the expiration time and iat is the issued-at time, both normally represented as Unix seconds.