JWT Decoder

Security

Inspect JWT header, payload and expiry claims.

Decoding a JWT does not verify its signature. Anyone can read a token's contents; only the issuer's key can prove it is genuine. The token you paste never leaves this page and is not stored.

Token

Paste a JWT. A leading “Bearer ” prefix is ignored.

Compare tokens

Enter tokens in separate fields to compare their lifetimes and claims. Decoded only, not verified.

Enter adds a field below; pasting a list fills separate fields.

Enter two or more tokens to compare their expiry and claims.