Guided workflow
Inspect a web token safely
Decode a JWT, review its timestamps and document findings without transmitting the token to DailyITTools.
4–6 minutesIdentity, support and application engineers
Expected outcome
A local interpretation of token claims and expiry timing.
Remove live credentials
Use a redacted or expired token. Never paste an active credential into a ticket or shared recipe.
- Open tool
Decode the token locally
Inspect header and claim data. Decoding is not the same as signature verification.
- Open tool
Translate time claims
Convert exp, nbf and iat Unix timestamps into human-readable dates.
Do not include live credentials or customer payloads in saved notes. A successful decode or conversion is evidence about format—not proof that a system, signature or identity is valid.