JWT Expired Token – Decode and Check the exp Claim

Local only

Inspect a valid payload whose exp claim is in the past and distinguish decoding from authorization validity.

90 chars · 1 line

118 chars · 10 lines

Algorithm: HS256Signature not verifiedTime status: ExpiredExpired: 2023-11-14T22:13:20.000Z

JWT expiration status

How to inspect an expired JWT exp claim

An expired JWT can still be structurally valid and completely decodable. When exp is a valid NumericDate at or before the current time, this decoder labels it Expired and shows the ISO timestamp rather than returning a parsing error. This tool is free to use. No account or payment is required.

Last updated

What you can do here

  • Browser-local JWT decoding
  • Strict three-segment validation
  • Canonical Base64URL checks
  • Header and payload JSON validation
  • Expiration status details
  • No signature verification claims

Steps

  1. Decode the token and locate the exp claim in the payload.
  2. Read the decoder's Expired or Expires timestamp detail.
  3. Use the issuing system's refresh or reauthentication flow instead of editing exp in the token.

Expiration is evaluated after successful decoding

The decoder treats exp as Unix seconds when it is a finite number. A past value changes the status detail to Expired, but the header and payload are still shown because parsing itself succeeded.

Expired JWT example

The exp claim 1700000000 corresponds to a past UTC timestamp.

Payload claim

"exp": 1700000000

Decoder detail

Expired: 2023-11-14T22:13:20.000Z

Common questions

Frequently asked questions

Does an expired JWT fail to decode?

No. Expiration is a claim status. A structurally valid expired token can still be decoded.

Can I change exp and reuse the token?

Changing the payload changes the signed data and does not create a valid replacement token. Obtain a fresh token from the issuer.

Does this page enforce issuer or audience rules?

No. It only decodes locally and displays expiration status; application-specific validation belongs in a trusted verifier.

Recommended next steps

JWT Signature Not VerifiedUnderstand why decoding JWT claims does not authenticate the token.JWT Invalid JSON PayloadFix a Base64URL payload whose decoded text is not a JSON object.Unix Timestamp Converter OnlineConvert iat and exp NumericDate values to readable UTC timestamps.

Debugging a specific JWT issue? Browse JWT troubleshooting.