CalculatorsConvertersDeveloperTextAll toolsDirectory
Submit your tool Sign in
Theme
Home/Answers/Security
How-to

How do I check when a JWT expires?

Short answer

Decode the token with a browser-based JWT decoder and read the exp claim in the payload, which holds the expiry as a Unix timestamp. The decoding runs entirely on your device, so the token is never transmitted.

Expiry lives in the exp claim

A JSON Web Token carries claims in its payload, and the standard exp claim is the expiration time expressed as a Unix timestamp, the number of seconds since 1970. If the current time is past exp, the token should be rejected. Decoding the payload lets you read exp and other timing claims like iat, so you can tell whether a token is still valid while debugging.

Decode without handing over a live credential

A JWT is effectively a live credential until it expires, so you should not paste a real one into a site that decodes it server-side. A client-side decoder splits and Base64-decodes the token in your browser, showing the header and payload without transmitting anything. Note that decoding reads the claims but does not verify the signature. It is free and needs no sign-up.

Step by step

  1. Open the decoder. Open the JWT decoder in your browser.
  2. Paste the token. Paste the JWT you want to inspect.
  3. Read the exp claim. Find the exp value in the payload and read it as a Unix timestamp.

Frequently asked questions

Which claim holds the expiry?

The exp claim holds the expiration time as a Unix timestamp in seconds.

Is my token sent to a server?

No. The token is decoded in your browser and never transmitted.

Does decoding verify the signature?

No. Decoding reveals the claims; verifying the signature separately requires the signing key.

Related answers