JWT decoder
Read the header and claims of a JSON Web Token and check when it expires.
Runs locally. Nothing you paste leaves this tab.
Header
Payload
Notes
The signature is not verified. Decoding only shows what the token claims. To trust a token, verify it against the issuer’s public keys (for Entra ID, the JWKS at the tenant’s /discovery/v2.0/keys endpoint).