Skip to content
SleekPrompt

JWT Decoder

Decode a JSON Web Token to read its header, payload and expiry. Your token is never transmitted or logged.

Decoded locally — the token is never sent anywhere.

JSON Web Token

empty

Decoded claims

Paste a token to see its header, payload and expiry.

How to use the JWT Decoder

  1. 1

    Paste your JWT — the Bearer prefix is stripped automatically.

  2. 2

    Header and payload are decoded instantly, with timestamps shown in readable form.

  3. 3

    Check the expiry badge to see at a glance whether the token is still valid.

Frequently asked questions

Does this verify the signature?

No, and that is deliberate. Verifying a signature requires your secret or public key, and pasting a signing secret into any website is unsafe. This tool decodes the token so you can read its claims.

Is it safe to paste a real token here?

Yes. Decoding happens entirely in your browser with no network request, so the token never leaves your machine. You can confirm this by opening DevTools and watching the Network tab, or by disconnecting from the internet.

Is my data uploaded to a server?

No. Every tool on this site runs entirely inside your browser using JavaScript. Your input never leaves your device and is never sent over the network, which means it is safe to paste production data, API responses and tokens.