Free JWT Decoder
Read the header and payload of a JSON Web Token and see when it expires.
Runs in your browser. Nothing you type is uploaded.
How to use the JWT Decoder
Paste a JWT into the box.
Read the decoded header, payload and time claims.
Copy the parts you need, remembering that the signature is not checked.
Questions
Does this verify the signature?
No. It only decodes the token. Verifying needs the secret or public key, so never trust the claims shown here on their own.
Is it safe to paste a token here?
The token is decoded in your browser and not sent anywhere. Even so, do not paste live tokens from production systems you do not own, because a valid token can grant access.
What do exp, iat and nbf mean?
They are times in seconds since 1 January 1970 UTC: exp is when the token expires, iat is when it was issued and nbf is the time before which it must not be accepted.