Last updated
Paste a JSON Web Token to inspect Base64URL-decoded header and payload JSON. Shows exp/nbf as human-readable UTC when present. Does not verify signatures or claims; use your auth stack for trust decisions.
Quick answer: JWT Decoder (Header & Payload)
JWT decoder: split three Base64URL segments, JSON-print header and payload, and translate exp/nbf to UTC without claiming signature validity.
Example: Paste a staging access token → see HS256 vs RS256 in header plus exp minutes from now in the payload block.
Calculations follow the documented formula on this page; rounding and input units can change the last digit-treat outputs as educational estimates unless you reconcile with source systems.
* This is an estimate. Actual amounts may vary slightly based on input assumptions.
Use this when you need to read alg, kid, iss, and audience claims during OAuth debugging. Anything about trust still belongs to your verifier with the right keys and algorithms.
Paste a JSON Web Token to inspect Base64URL-decoded header and payload JSON. Shows exp/nbf as human-readable UTC when present. Does not verify signatures or claims; use your auth stack for trust decisions.
Inputs on this page: JWT (paste token). Assumptions stay visible so you can reproduce the figure elsewhere.
Long-form walkthroughs that pair well with this calculator. When you need narrative context beyond the live fields, start here and return to the tool to plug in your own numbers.
JWT expiry, timestamps, and honest API health probes (2026)
Explain JWT exp and clock skew, pair expiry checks with Unix timestamps, clarify decode vs verify, and show how Toollabz API URL checker suggests curl probes without fake live HTTP inside sync tools.
Read guide →Base64 for APIs and JWT fragments: what encoding actually buys you (2026)
Practical guide to Base64 vs URL encoding, Base64URL in JWTs, size inflation, Unicode pitfalls, and workflows with Toollabz Base64, URL encoder, JSON validator, and JWT decoder.
Read guide →JWT decode vs verify: what you are actually proving in the browser (2026)
Plain-language guide to JWT structure, decode vs verify, exp/nbf reading, algorithm confusion, JWE vs JWS, and safe workflows with Toollabz JWT decoder, JSON validator, Unix timestamps, Base64, and regex testing.
Read guide →JSON formatting and validation explained for developers (2026)
Cover JSON syntax footguns, minify vs pretty-print trade-offs, formatter vs validator vs schema roles, and link to Toollabz JSON formatter/validator, URL encoding, regex guide, and developer hub.
Read guide →People who care about jwt decoder use JWT Decoder (Header & Payload) as a planning sandbox: JWE tokens encrypt payload bytes; this path targets common JWS JSON layouts.
Continue in the Developer category hub, the Developer tools collection, or the glossary. Related calculators in this session: JSON Formatter, JSON Validator, Base64 Encoder/Decoder, Regex Tester, Unix Timestamp Converter, URL Encoder/Decoder.
The Formula
Base64URL-decode JWT segments; JSON.parse header/payload; time claims from numeric seconds| This tool | Base64URL-decode JWT segments; JSON.parse header/payload; time claims from numeric seconds |
|---|---|
| Related intent: jwt decoder | See paired tools for jwt decoder-each page documents its own core relationship next to the live form. |
| Related intent: decode jwt online | See paired tools for decode jwt online-each page documents its own core relationship next to the live form. |
Core relationship for JWT Decoder (Header & Payload):
Base64URL-decode JWT segments; JSON.parse header/payload; time claims from numeric seconds
Worked check: Paste a staging access token → see HS256 vs RS256 in header plus exp minutes from now in the payload block.
Keep the same assumptions and open a neighbor calculator when your question branches: JSON Formatter, JSON Validator, Base64 Encoder/Decoder, Regex Tester. Each page documents its own formula beside the fields.
Learning links: Methodology · Editorial policy · Glossary
Paste a staging access token → see HS256 vs RS256 in header plus exp minutes from now in the payload block.
Re-enter the same numbers in the calculator above to confirm the page math matches the interactive result.
People who care about jwt decoder use JWT Decoder (Header & Payload) as a planning sandbox: JWE tokens encrypt payload bytes; this path targets common JWS JSON layouts.
Instant response
Run JWT Decoder (Header & Payload) in the browser and read the breakdown beside the form.
Transparent formula
The formula and worked example on this page match what the calculator uses.
Privacy friendly
No account required; inputs stay in your session unless you choose to share them.
Cross-device ready
Layout works on mobile, tablet, and desktop for the same field labels.
Official references for context. Calculator outputs are planning estimates—confirm material decisions with the primary authority or a qualified professional. See our methodology and editorial policy.
Reviewed July 18, 2026 · Content stamp 2026-07-18
Click a question to expand the answer.
No. Signature verification needs your server keys and algorithm policy; this tool only decodes readable segments.
Tokens must be three Base64URL segments. Truncated, encrypted (JWE), or malformed tokens will error clearly.
Processing is in-browser on Toollabz; still avoid pasting highly sensitive tokens on shared devices.
This decoder targets signed JWT (JWS) layout. JWE payloads are not supported here.
Yes; any JSON claims in the payload appear in the formatted output.
JWT decoder: split three Base64URL segments, JSON-print header and payload, and translate exp/nbf to UTC without claiming signature validity.
Paste a staging access token → see HS256 vs RS256 in header plus exp minutes from now in the payload block.
JWE tokens encrypt payload bytes; this path targets common JWS JSON layouts. Rotating signing keys can make old tokens fail even when payload still looks fine. Never paste long-lived refresh tokens on shared kiosks even if decode is local.
Same-category picks first, then high-intent neighbors that often answer the next calculation question.
JSON Formatter
Format minified JSON beautifully.
JSON Validator
Validate JSON syntax instantly with error feedback.
Base64 Encoder/Decoder
Encode or decode Base64 text for APIs and integrations.
URL Encoder/Decoder
Encode or decode URL strings for query and path safety.
Regex Tester
Test regex patterns and preview matched outputs.
API Response Formatter
Format and validate API JSON responses for readability.
Open the full directory, browse your hub collection, or jump back to this category. Bookmark the page if you use it often.
Reviewed by Imtiaz Ahmad
Founder & lead engineer | Last reviewed July 18, 2026
See methodology and editorial policy.