JWT Decoder
Paste a JSON Web Token to read its header, payload and claims, and see whether it has expired. Decoding happens entirely in your browser.
Runs entirely in your browser. Nothing you type here is transmitted, logged, or stored. There is no server to send it to. Open your developer tools and watch the network tab if you want to confirm it.
Decoding only. The signature is not verified: that needs the secret or public key, which should never be pasted into a web page.