Question 1

How do I decode a JWT?

Accepted Answer

Paste your JWT into the input box and click Decode. The tool splits the token into header, payload, and signature, then displays the decoded JSON for the header and payload.

Question 2

Does this tool verify the JWT signature?

Accepted Answer

No. This decoder only parses and displays the token contents. Signature verification requires your secret or public key and is not performed here.

Question 3

Is it safe to paste my JWT here?

Accepted Answer

Decoding runs locally in your browser and nothing is sent to a server. Still, JWTs can contain sensitive data — avoid sharing production tokens publicly and treat decoded output as confidential.

Question 4

What are exp, iat, and nbf?

Accepted Answer

They are standard time claims: exp (expiration), iat (issued at), and nbf (not before). When present as Unix timestamps, this tool shows them in a readable date format below the payload.

JWT Decoder

JWT