Skip to content
Rotina Diária

Decode JWT

View a JWT token's header and payload, with readable expiration dates—without sending the token.

Decodes only — does not verify the signature.

Qualquer pessoa consegue ler o conteúdo de um JWT; garantir que ele é autêntico exige a chave do emissor. O token é lido apenas no seu navegador, mas evite colar tokens de produção ainda válidos em qualquer site.

Processed on your device. Nothing you type is sent anywhere.

How to use: Decode JWT

  1. Paste your JWT token (you can include the "Bearer" prefix).
  2. View the algorithm, issue and expiration dates, and payload contents.
  3. Copy the formatted payload or header as JSON.

About this tool

A JWT has three dot-separated parts: header, payload, and signature. The first two are just Base64URL-encoded JSON that anyone can read, so never put passwords or sensitive data in the payload.

This tool only decodes. Verifying the signature requires the issuer's secret key (HS256) or public key (RS256, ES256) and should be done by your server. A token that "opens" here isn't necessarily authentic.

Frequently asked questions

Why doesn't this tool validate the signature?

Signature validation depends on the issuer's key, which you should never paste into websites. Decoding shows the contents; validation proves they haven't been changed—these are different operations.

Is it safe to paste my token here?

Your token is processed only in your browser and isn't sent to any server. Still, a valid JWT works like a temporary password: avoid sharing unexpired tokens from production.

What do iat, nbf, and exp mean?

iat is when the token was issued, nbf is when it becomes valid, and exp is when it expires. All are Unix timestamps in seconds; this tool displays them in your time zone.

Is it really free? Is there a daily limit?

It's free with no daily limits. Processing happens on your device, so there's no per-use cost and no need to limit you.

Does it work on phones?

Yes. The site works in any modern browser on Android, iPhone, Windows, Mac, and Linux—no installation needed.

Related tools

View all — Related tools
Encode and decode Base64 Convert text or files to and from Base64. Unix Timestamp Converter Convert Unix timestamps to dates and times—and vice versa—in any time zone. JSON Formatter Format, validate, and minify JSON with helpful error highlighting. Hash Generator Calculate SHA-1, SHA-256, SHA-384, and SHA-512 hashes for text and files. Create ZIP Combine multiple files of any type into a single compressed .zip file, right in your browser. Extract ZIP Open ZIP files without installing anything. Preview the contents and download only the files you need. UUID Generator Generate UUID v4 and v7 values in bulk, with or without hyphens. Slug Generator Turn titles into clean, readable URLs without accents.