JWT Decoder
royhp.comEncoded token
No expiry
The signature is NOT verified. This tool only decodes the token — it has no secret or JWKS, so it cannot confirm the token is authentic or untampered. A decoded JWT proves nothing about authenticity; always verify the signature server-side.
Everything runs on-device in your browser — the token is never uploaded or stored. Segments are split on ".", the header and payload are Base64url-decoded and parsed as JSON; exp/iat/nbf are interpreted as Unix seconds. For inspection only — never paste production tokens you don't control.