MyDailyKit

JWT Decoder

Decode JWT tokens online to inspect the header, payload, and expiry. Free, fast, and fully client-side — your tokens never leave your browser.

Signature is NOT verified — decoding only
Ready.

How to use the JWT Decoder

  1. Paste your JSON Web Token into the input box (or click Load sample).
  2. The decoded Header and Payload appear instantly below.
  3. Check the claims table — iat, nbf, and exp are shown as readable dates, with an expiry flag.
  4. Use Copy on either panel to grab the JSON.

Frequently asked questions

Does this verify the signature?
No. This tool only decodes the header and payload so you can inspect them. It does not verify the signature — never trust a token’s contents without server-side verification.
What are iat, nbf, and exp?
iat is when the token was issued, nbf is the earliest time it is valid ("not before"), and exp is when it expires. All three are Unix timestamps in seconds.
Why does it say my token is invalid?
A JWT is three Base64URL sections separated by dots (header.payload.signature). If a section is missing, altered, or not valid Base64URL/JSON, decoding fails.
Are my tokens sent anywhere?
No. Decoding happens entirely in your browser. Your tokens are never uploaded, logged, or stored.

Related tools

More Developer tools
JSON Formatter Format, validate & minify JSON JSON ⇄ CSV Converter Convert between JSON and CSV Base64 Encode / Decode Encode & decode Base64 URL Encoder / Decoder Encode & decode URLs