How jwt decoder works
Base64url-decodes the header and payload as UTF-8 JSON. No key or signature verification is performed.
Try an example
Inspect the exp claim as a Unix timestamp using the related converter.
Good to know
Decoding does NOT verify authenticity, validity, security or authorization. Do not trust decoded claims. Input stays in this tab and is never sent to analytics. Limit 100,000 characters. No input is executed.
Your privacy
Processing happens on this device. We do not upload your input, put it in share links or save it to your favourites. Closing this tab discards the working input; downloaded results remain wherever you save them.