HOW-TO

How to read a JWT’s expiry

Find out when a JWT expires by decoding it and converting the exp claim. Step-by-step with a free browser-side decoder.

To find out when a JWT expires, decode it and read the exp claim — a Unix timestamp — then convert it to a readable date. Here is the full flow, done safely in your browser.

Decode, then convert

The exp claim lives in the JWT payload as seconds since 1970. Decode the token to read the raw number, then convert it with a timestamp tool to see the human date and time. Also worth checking: iat (issued-at) tells you when it was minted, so exp minus iat is the token’s lifetime.

Do it client-side

A JWT often carries a live session, so decode it in the browser (ours never sends the token anywhere). The decoder shows the payload including exp; remember the signature stays unverified without the key.

Step by step

1

Paste the token into the JWT decoder.

2

Find the exp value in the decoded payload (a 10-digit Unix timestamp).

3

Convert that timestamp to a date with the timestamp tool.

4

Compare exp to iat to see the token’s total lifetime.

Try it now — free, no signup

Use the JWT decoder in your browser. Then, when you need it at scale with an API key and higher limits, grab the full Eveses API.

FAQ

What if there is no exp claim?›
The token has no built-in expiry — it stays valid until revoked another way. That is riskier; short-lived tokens should always set exp.
Is exp in my timezone?›
No — it is UTC seconds. The timestamp tool shows both UTC and your local time.

Related