🔑 JWT Decoder

Paste a JSON Web Token to see its decoded header and payload, plus whether it has expired. Decoding happens entirely in your browser — the token is never sent to any server, and this tool cannot verify a signature (that needs the signing secret).