JWT Viewer
Paste a token and see its claims, with the dates as dates and the status spelled out.
Works in your browser. The token and any key you paste never leave your device.
Decoded in your browser. The token and any secret you paste never leave your device.
JWT Viewer at a glance
- Price
- Free
- Data sent to us
- None, it runs in your browser
- Sign-up
- Not needed
- Reads
- Signed JWTs (JWS), three parts
- Verifies
- HS256/384/512, RS256/384/512, PS256/384/512, ES256/384/512
- Does not
- Fetch keys or read encrypted tokens
How to use JWT Viewer
- Paste the tokenPut the JWT in the box, with or without the Bearer prefix. The header, payload and claims appear at once.
- Read the claimsCheck the expiry line, the issuer and the audience. Expired or not-yet-valid tokens are marked in red.
- Check the signaturePaste the secret or the PEM public key under Signature. A green line means the token was signed with that key and not changed.
Paste a JWT and see its header and payload laid out, with the registered claims named and the expiry, issue and not-before times shown as dates in UTC and your own time, together with how long is left or how long ago the token expired. The signature can be checked too if you have the key. Everything stays in your browser.
How it works
JWT Viewer is a web page that does its work on your own device. Everything you type or choose is worked out by your browser and never sent to a server, so nothing is stored and there is nothing to delete. There is no account, no sign-up and no limit on how often you use it.
Reading a token from a log
Tokens in logs often carry a Bearer prefix or line breaks; both are ignored. If the payload shows a user id you do not expect, the client is sending the wrong token; if exp is in the past, the refresh flow failed.
Questions
Why are the times shown twice?
Once in UTC, which is what the claim means, and once in your own time zone, which is what you compare against a clock.


