Does it verify the signature?

No. This tool only base64url-decodes the Header and Payload to show their plaintext content. It does not validate the signature and does not need a key — verify signatures on your own server.

Is my token uploaded?

No. All decoding happens locally in your browser; the token is never sent to any server, so it is safe to paste test tokens that contain sensitive claims.

Can it detect expiry?

Yes. If the Payload contains time fields like exp / iat / nbf (Unix seconds), it shows the readable local time and whether the token has expired.

JWT Parser

Paste a JSON Web Token to decode its Header and Payload instantly. 100% client-side — nothing is uploaded or verified.

Paste a JWT (three parts separated by .)

Hint: decode only, no signature check — handy for inspecting claims.

Header

—

Payload

—

FAQ

Does it verify the signature?: No. This tool only base64url-decodes the Header and Payload to show their plaintext content. It does not validate the signature and does not need a key — verify signatures on your own server.
Is my token uploaded?: No. All decoding happens locally in your browser; the token is never sent to any server, so it is safe to paste test tokens that contain sensitive claims.
Can it detect expiry?: Yes. If the Payload contains time fields like exp / iat / nbf (Unix seconds), it shows the readable local time and whether the token has expired.