Administration and development

JWT decoder

Read the contents of a JSON Web Token and see when it expires.

JWT (token)

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkplYW5ldHRlIiwiaWF0IjoxNzAwMDAwMDAwLCJleHAiOjE5MDAwMDAwMDB9.signature

What does this mean?

A JSON Web Token consists of three parts, separated by periods: a header (how it is signed), the payload (the data, such as who you are and when the token expires), and the signature. The first two parts are only Base64-encoded, not secret: anyone who has the token can read them.

This tool only reads and does not verify the signature. A readable token is therefore not necessarily genuine. Do not paste tokens from a real, active account into services from others; here everything stays in your browser.