JWT Decoder
Decode JWT header and payload locally — without verifying signatures.
Everything is decoded in your browser. Your token is never sent anywhere.
Tool
Paste a JWT
Decoding runs locally in your browser. The signature is shown but never verified.
Why Dockzio?
Simple tools that respect your time and your privacy.
Free and instant
No subscriptions, no paywalls, no waiting.
No sign-up required
Open a tool and get to work immediately.
Private by design
Processing happens locally in your browser whenever possible.
Beautifully built
Clean, fast interfaces designed for everyday productivity.
About the JWT decoder
Paste a JSON Web Token to see its decoded header and payload as formatted JSON, plus the expiry status from its exp claim.
This does not verify signatures
A JWT’s signature can only be checked with the issuer’s secret or public key, which this tool never has and never asks for. Decoding shows you what a token claims — it does not confirm the token is genuine or unaltered.
Reading claims
Standard claims like exp, iat, and nbfare Unix timestamps in seconds. Expiry is evaluated against your device’s current clock.
Format
A JWT is three Base64URL segments separated by dots: header.payload.signature. Only the first two are decoded here; the signature is shown as-is for reference.
Privacy first
Decoding runs locally in your browser. Your token is never sent to a Dockzio server.
FAQ
Quick answers to common questions.