Septian R.
← all tools

JWT decode

Read a token’s header and payload, with expiry times in UTC and Jakarta — and a clear verdict on whether it is still valid.

inspect jwtauthdebuggingtoken

Paste a token, with or without a Bearer prefix. Nothing is sent anywhere — there is no server here to send it to.

Safe for real tokens
Decoded 
  
 
 
 
Paste a bearer token to see what is actually inside it. The useful part is the expiry: exp, iat and nbf rendered in both UTC and Jakarta with a plain answer about whether the token is live. Debugging a 401 is usually a five-minute argument with a timestamp, and this ends it. The signature is not verified — that needs the secret, which is not here and should not be. This reads the token; it does not trust it.