OneTool

JWT Decoder

Inspect JWT claims locally. Decode only — signatures are never verified.

Decode only — signatures are not verified. Do not treat a decoded token as authentic.

Expired — exp = 2023-11-14T22:13:20.000Z

Signature segment: present (not verified)

What is this tool?

A JSON Web Token (JWT) is a compact way to carry claims between parties. This tool Base64URL-decodes the header and payload so you can read claims like sub, iat, and exp. It does not accept a secret or public key and does not verify signatures — never treat a decoded token as authentic proof.

How to use it

  1. Paste a JWT (three dot-separated segments).
  2. Review the pretty-printed header and payload.
  3. Check the exp indicator if an expiry claim is present.