toolvio.

JWT decoder

Decode a JSON Web Token header and payload, check expiry.

Token
Header 
 
 
 
Payload 
 
 
 
 
Signature is not verified.
 
  
 
Runs locally in your browser. Nothing is uploaded.
 
 
 
 
How to use
 
  1. Paste the token.
  2. Header and payload appear decoded; dates are shown as readable time.
  3. The signature is not verified, since that needs the secret key.
 
Questions
  
Is it safe to paste a real token?
 
Decoding happens in your browser and nothing is sent anywhere. Still, treat tokens like passwords.