Utility
JWT decoder
Paste a token, read its header and payload, and see when it expires, decoded locally in your browser.
Decoded in your browser. The signature is not verified, and nothing is sent anywhere. Never paste a production token you don’t control.