JWT Decoder
Unpack the header and payload of a JWT and read the issued-at and expiry claims as real dates.
The signature is not verified. Use this only to inspect what a token contains.
How to use
Paste the whole token and the header and payload come back as readable JSON. You can see at a glance which algorithm signed it and which claims it carries.
When the issued-at and expiry claims are there, the raw second counts are turned into dates you can actually read, and the token is marked expired or valid against the current time.
This tool does not verify the signature. It shows you what is inside a token; to know whether one has been tampered with, verify it on your server with the secret or public key.
The token you paste is not sent to a server. It is decoded inside your browser, so even a production token stays on your machine.