JWT decoder · Guide
Checking JWT Token Expiry
Expired tokens are one of the most common causes of sudden auth failures. The exp claim tells you exactly when a token stops being valid.
Read exp and iat
The exp claim is the expiry time and iat is when the token was issued, both as Unix timestamps in seconds. Decode the token and compare exp to the current time to see whether it is still valid.
Watch the units and clock
JWT timestamps are seconds, not milliseconds — a common confusion. Also account for small clock differences between systems; many verifiers allow a few seconds of leeway.
Frequently asked questions
Can I use this for production work?
Yes, for inspection, formatting and quick generation. Still review the output before committing it to production code or configuration.
Ready to try it?
Open the free browser-based JWT decoder and apply what you just read — no sign-up, runs locally.
Open the JWT decoder tool