transform.ignlab.net
{{ output }}{{ outputError ? '' : 'Transformed output appears here…' }}
Paste a JSON Web Token and see its decoded header and payload immediately, plus a computed expiry date and whether it has already expired. The signature is not verified — this only decodes the Base64URL-encoded header and payload, it never contacts a server or validates against a secret.
No, only the header and payload are decoded and shown; signature verification requires the signing key, which this tool never asks for or needs.
No — decoding happens entirely in your browser using standard Base64URL decoding, nothing is transmitted.
If the payload has an exp claim, its human-readable date and whether it has already passed are shown in a _meta field alongside the decoded payload.
Need a different conversion? Browse all conversions, sanitize secrets with AI Safeguard, or read the guides.