JWT Decoder

Paste a JSON Web Token to inspect its header and claims, with registered claims like exp and iat translated to real dates and an expiry check at a glance. Optionally verify an HS256 signature with a shared secret.

Private by design: decoding and verification happen entirely in your browser with the Web Crypto API. Tokens and secrets are never uploaded, logged, or stored.