How JWT Decoder works
JWT decoder splits a JSON Web Token into its three parts, header, payload and signature, and displays the decoded header and payload as formatted JSON, along with the expiry (exp) and issued-at (iat) timestamps in human-readable form. It is the fastest way to inspect what is inside a JWT without writing code.
Important: this tool decodes only. It does not verify the signature against a secret or public key, so it cannot confirm whether the token is authentic or has been tampered with. Paste your JWT here to read its claims, then validate the signature in your backend. The exp claim is compared against your device clock to flag an expired token, but no revocation list is checked.