Free tool

JWT Inspector

Decode a JWT's header and payload and check expiry - decode-only, entirely in your browser, no signature verification claimed.

Paste a JWT

Decodes only - this never sees your signing key, so it can show what a token contains, not whether it's authentic.

Expired - expires 5/20/2025, 9:03:42 PM

Header

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

{
  "sub": "1234567890",
  "name": "John Doe",
  "iat": 1716239022,
  "exp": 1747775022
}

iat: 5/20/2024, 9:03:42 PMexp: 5/20/2025, 9:03:42 PM

Was this tool helpful?

See this same kind of analysis applied to your whole repository

Call graphs, dead code, blast radius, and a health score. Results in 60 seconds, free.

Related tools

CORS Config Generator/Explainer

Origins, methods, headers to generated CORS headers.

Bcrypt Cost Factor Calculator

A measured benchmark on your hardware plus a target hash time to the right bcrypt cost factor.

AWS IAM Policy Generator

Service, access level, and a resource ARN to a valid, scoped IAM policy JSON.

API Key Format Identifier

Paste a key prefix - which service it belongs to, based on documented prefix conventions.

OAuth Redirect URI Validator

Check a redirect URI against the OAuth 2.0 Security BCP - HTTPS, exact-match, no wildcards.

Runs entirely in your browser. Nothing is stored. Free forever.