JWT Decoder
Decode and inspect JSON Web Tokens
Paste your JWT token
Use these tools directly in Chrome
Install the DailyDevTools extension — access all tools from your browser toolbar
What is JWT Decoder?
JSON Web Tokens (JWTs) are compact, URL-safe tokens used for authentication and data exchange in modern web apps. A JWT has three Base64URL-encoded parts: the header (algorithm), payload (claims), and signature. DailyDevTools' JWT Decoder instantly splits and decodes all three parts, displays human-readable timestamps, checks token expiry, and highlights the algorithm used — without ever sending your token to a server.
How to use JWT Decoder
- 1Paste your JWT token (the string starting with 'eyJ...') into the input field
- 2The decoder instantly shows the decoded Header, Payload, and Signature in separate panels
- 3Check the Expiry indicator to see if the token is still valid based on the 'exp' claim
- 4Hover over any timestamp field to see the human-readable UTC date and time
Frequently asked questions
Is it safe to paste my JWT here?
Yes. The decoder runs entirely in your browser — your token is never sent to any server. However, for production secrets or admin tokens, always prefer a local tool.
Can this verify the JWT signature?
The decoder shows all decoded fields but does not verify the cryptographic signature, as that requires the secret key. Use it for inspecting token contents and expiry, not for security validation.
What does Token Expired mean?
JWTs include an 'exp' claim — a Unix timestamp after which the token is no longer valid. The decoder compares this against the current time and flags expired tokens in red.