~ $ devkit:jwt-decode

JWT Decoder

Decode the header and payload of a JSON Web Token and inspect its expiry claims. The signature is shown but never verified.

Token

Header

—

Payload

—

Claims

How to use JWT Decoder

Paste a three-part JWT and select Decode.
Inspect the header, payload and registered time claims. exp is expiry, nbf is the earliest valid time, and iat is issuance.

Example

Header: {"alg":"HS256","typ":"JWT"}
Payload: {"sub":"123","iat":1704067200}
iat describes when the token was issued; it is not an expiry time.

Details and limitations

Decoding does not verify the signature or establish that a token is trustworthy. Encrypted JWTs (JWE) are not supported. Inputs are processed locally; avoid sharing screenshots or copied tokens containing credentials.