JWT Decoder & Expiry Checker
Decode a JWT's header and payload and check its exp claim against the current time.
Inputs
Results
Score
2/6
Three segmentsInfo
1 segments found, 0 non-empty (need exactly 3)
Header is valid JSONWarning
segment 1 missing
Payload is valid JSONWarning
segment 2 missing
Has numeric exp claimInfo
no numeric exp claim in payload
Not expiredPassed
no exp claim — never expires on its own
alg is not nonePassed
skipped (invalid header)
About this tool
Paste a JWT to see its header and payload decoded, whether the exp claim is in the future, and whether the token claims the unsafe alg:none. Runs locally.
How to use
- 1Paste a JWT (three dot-separated segments) — copy the full header.payload.signature string from your app, logs, or an Authorization header.
- 2Check the Three segments and header/payload JSON rows to confirm the token actually decodes.
- 3Read the numeric exp value in the Has numeric exp claim row, then the humanized time remaining in the Not expired row.
- 4If the alg row fails, the token claims an unsigned scheme — reject it rather than trying to verify it.
Frequently asked questions
Related tools
Base64 Encoder / DecoderEncode and decode Base64, with URL-safe mode.URL Query String BuilderBuild and parse URL query strings.Password Hash GeneratorGenerate and compare password hashes.Code DiffDiff two code snippets with word-level detail.UUID GeneratorGenerate UUID v4 and v7 in batches, with prefixes.Base64 Data URI GeneratorTurn text, CSS, JS, JSON, or SVG into a data:<mime>;base64, URI — UTF-8 safe.