How to Decode a JWT Token Online
Inspect JWT token claims, expiry time, and structure without exposing your token to third-party servers.
JWTs (JSON Web Tokens) are Base64-encoded strings containing header, payload, and signature. FileCraft decodes and displays the claims locally.
Step-by-Step Guide
Copy your JWT token
JWT tokens look like: eyJhbGc...xxxx.yyyy.zzzz (three Base64-encoded segments separated by dots).
Open FileCraft JWT decoder
Go to filecraft.tools/json-formatter and use the JWT Decode tab.
Inspect the claims
The header (algorithm), payload (user data, exp, iat), and signature are shown separately.
Check expiry
The "exp" claim shows the expiry timestamp. FileCraft shows this as a human-readable date.
Try it now — free, no account, no upload
Open Json Formatter →Pro Tips
- 💡Never share JWT tokens in public — they typically grant access to user accounts
- 💡FileCraft processes JWTs locally — your token never leaves your browser
Frequently Asked Questions
Can FileCraft verify JWT signatures?
JWT decoding shows claims without verification. To verify the signature, you need the secret key (for HS256) or public key (for RS256) — don't share these with any third-party tool.