JWT Decoder

Decode a JWT into its header, payload and signature, and see its expiry status. Runs in your browser. Free, with no sign-up.

How It Works

Paste the full JWT token (the three base64-encoded parts separated by dots).

The header (blue), payload (purple), and signature (green) are displayed with formatted JSON.

Timestamps are converted to readable dates. Expiration status shows whether the token is still valid.

No. Signature verification requires the secret key or public key, which this tool intentionally does not ask for. It only decodes.

Yes. Everything runs in your browser. The token is never sent to any server.

Standard claims: iss (Issuer), sub (Subject), aud (Audience), exp (Expiration), iat (Issued At), nbf (Not Before), jti (JWT ID).

Varstatt is a one-person product studio run by Jurij Tokarski, product engineer since 2011. These tools are free and open — no signup, no catch.