Shipwright Studio · Lab
JWT Decoder is a free online tool that decodes JSON Web Tokens entirely in the browser — no token ever leaves the page and no server is involved. Paste a token to split it into header, payload and signature, pretty-print the JSON, and check the exp, iat and nbf time claims against the current clock. Built for developers debugging auth flows who need a quick, privacy-safe token inspector.
No signature verification — that requires the signing secret or public key, which you should never paste into a website. No JWK fetching, no encrypted JWT (JWE) support, no network calls, and nothing is stored: refresh the page and your token is gone.