Question 1

How do I decode a JWT token?

Accepted Answer

Paste your JWT (the long Base64 string starting with eyJ...) into the input field. The tool automatically decodes the header and payload sections — no click needed. It shows the algorithm (e.g., HS256, RS256), token type, and all claims in the payload.

Question 2

How do I check if my JWT has expired?

Accepted Answer

The tool reads the exp (expiration) claim from the payload and shows whether the token is still valid, expired, or about to expire. Expired tokens are highlighted in red with the expiration date. Valid tokens show remaining time in green.

Question 3

Is it safe to paste real JWTs into this tool?

Accepted Answer

All decoding happens in your browser — the token is never transmitted to any server. However, JWTs often contain sensitive user data. Never share tokens publicly. Always treat decoded token contents as confidential.

JWT Debugger

JWT Debugger & Decoder