JWT Decoder — A JSON Web Token packs two Base64URL-encoded JSON objects — the header and the payload — plus a signature. This decoder shows both objects as readable JSON and highlights the exp claim, telling you whether the token is expired and by how much.
Tokens are decoded locally in your browser. Paste-sensitive JWTs here safely — nothing is transmitted.
Was JWT Decoder useful?
What is jwt decoder?
A JSON Web Token packs two Base64URL-encoded JSON objects — the header and the payload — plus a signature. This decoder shows both objects as readable JSON and highlights the exp claim, telling you whether the token is expired and by how much.
Unlike web-based debuggers that ask you to paste secrets into their servers, Uttir decodes entirely client-side, making it safe for production tokens.
How to use it
-
Paste the token
The full header.payload.signature string.
-
Inspect the claims
Header and payload render as formatted JSON.
-
Check expiry
If an exp claim exists, a badge shows whether it is expired.
Examples
Typical payload
Common claims: sub (subject), name, iat (issued at).
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Result: { "sub": "1234567890", "name": "John Doe", "iat": 1516239022 }
Frequently asked questions
Related guides
How to Encrypt a Message with a Password (in Your Browser)
A practical guide to password-based encryption: how AES-GCM with PBKDF2 actually works, why the wire format matters for future compatibility, the common foot-guns (weak passwords, no integrity check, ECB mode), and how to encrypt a message in your browser without trusting a remote service with the plaintext.
The Anatomy of a Perfect API Request
A good API request has six parts: method, URL, headers, body, authentication, and a way to handle the response. Most failed requests fail because one of those parts is wrong. Here is a tour of what each part does, the common mistakes, and the order in which to debug a failing request.
The 6 Best Free API Testing Tools in 2026 (No Signup, No Install)
A curated list of the best free API testing tools: HTTP clients, request builders, response inspectors, and mock servers. All browser-based or self-hosted, all free, no signup required.
Related tools
Base64 Decoder
Decode Base64 back into readable text, with clear errors for malformed input.
JSON Formatter
Format, beautify, and validate JSON with adjustable indentation — instantly in your browser.
Unix Timestamp Converter
Convert Unix timestamps to readable dates and back, with a live current-time readout.
HTTP Status Code Lookup
Look up any HTTP status code from 100 to 511 with plain-language explanations, searchable and filterable by category.
Last reviewed: 2026-09-18