What this JWT decoder does
JWT contains three dot-separated parts: header, payload, and signature. This page separates those parts and formats the first two into readable JSON.
It is useful for API troubleshooting, auth testing, and integration checks when you need to inspect token content fast.
Readable dates for exp, iat, and nbf
Many JWT claims store timestamps in Unix format. We convert those values to local and UTC date strings so you can validate timing quickly.
We also highlight common claims such as iss, aud, sub, and role to improve manual verification during debugging.
Limitations and security note
Decoding is not signature verification. A decoded JWT is not automatically trustworthy. Always verify signatures in your backend or trusted environment.
Processing runs locally in your browser by default, which helps privacy during quick token inspection.