Does this tool verify the JWT signature?

No. This is a decoder only. Signature verification requires the secret or public key and must be done server-side. Never trust a decoded JWT without verification.

Is it safe to paste my JWT here?

The token is processed entirely in your browser and never sent to Zovaty servers. However, JWTs are credentials — avoid pasting production tokens on shared machines.

What does 'exp' mean?

exp is the expiration claim — a Unix timestamp after which the token must be rejected. The tool highlights expired tokens automatically.

Why does decoding fail?

The token may be malformed, missing a segment, or use an invalid Base64url encoding. Ensure you copied the complete token with exactly two dots.

JWT Decoder - Free Online JSON Web Token Tool | Zovaty

Zovaty

Loading tool…

JWT Decoder - Free Online JSON Web Token Tool | Zovaty | Zovaty