JWT Inspector

Paste a JWT and it gets decoded on the spot. Header and payload show up as formatted JSON, timestamp claims like exp, iat and nbf get converted to readable dates, and you get a heads-up if the token is expired. Everything runs client-side, nothing leaves your browser.

JWT Token:

A JWT is three Base64URL-encoded parts separated by dots: header (algorithm and type), payload (claims) and signature. This tool decodes the first two but does not verify the signature since that requires the signing key.