d4 · tools · jwt
Paste a JSON Web Token to read its header and payload, list the registered claims, and see when it was issued and when it expires. This tool decodes only, it does not verify the signature. Everything runs in your browser; nothing you type leaves this page.
Paste a compact JWT of the form header.payload.signature. Encrypted (JWE) tokens are not supported.
A JWT is decoded, not verified. Verifying a signature needs the issuer's secret or public key, which this tool never has and never asks for, so a decoded token here should not be trusted as authentic. Validity times are judged against your own device clock, so a wrong local clock will give a wrong verdict. Times are shown in UTC.