100% local decoding. Your token never leaves this browser.No server, no upload, no third-party API. The token is parsed entirely on your device, so this page keeps working even when you are offline.
Paste a JSON Web Token to decode its header and payload. Any iat, exp, nbf or auth_time claim is converted to your local time and checked against the current clock immediately.
Header
Payload
Timestamp claims in local time
| Claim | Meaning | Your local time | Relative to now |
|---|
How to read a decoded JWT
The header names the signing algorithm and key ID, and the payload carries claims such as sub, iss, aud, exp and iat. Expiry is checked against your local clock, so a token that looks valid but fails on the server usually means clock skew or a different time zone.
Safety notes
Decoding is not verification. This tool never tells you whether a signature is valid, so do not treat a readable payload as proof of identity. Never paste production tokens into a third-party page; this one processes the token locally, but the safest habit is still to test with a throwaway token.