JWT Missing exp Claim – Decode a Token Without Expiration

Local only

Decode a token with no exp claim and distinguish missing expiration data from a parsing failure.

90 chars · 1 line

118 chars · 10 lines

Algorithm: HS256Signature not verifiedTime status: Not evaluated (no numeric exp/nbf)Issued: 2023-11-14T22:13:20.000Z

JWT claim troubleshooting

What a JWT without an exp claim means

A JWT can be structurally valid and decode cleanly without an exp claim. In that case the decoder has no expiration NumericDate to format, so it shows the payload but no Expires or Expired detail. Whether exp is mandatory is a verifier or application policy decision, not a Base64URL decoding rule. This tool is free to use. No account or payment is required.

Last updated

What you can do here

  • Browser-local JWT decoding
  • Strict three-segment validation
  • Canonical Base64URL checks
  • Header and payload JSON validation
  • Expiration status details
  • No signature verification claims

Steps

  1. Decode the token and inspect the payload object for exp.
  2. Confirm the details panel has no Expires or Expired entry when exp is absent.
  3. Check the issuer and verifier policy to determine whether tokens without exp are acceptable.

The decoder does not invent an expiration time

Only a finite numeric exp value is converted to an ISO timestamp. If the claim is missing, the original payload remains visible and no expiration status is added.

JWT payload with no exp

The token includes iat but no expiration claim.

Decoded payload

{"sub":"123","iat":1700000000}

Expiration detail

No Expires or Expired detail

Common questions

Frequently asked questions

Is a JWT invalid just because exp is missing?

Not as a decoding matter. Your identity provider or application may still require exp as part of its validation policy.

Does this tool add a default expiration?

No. It only displays claims already present in the payload.

Can I trust a token with no exp after decoding it?

No. Decoding does not verify the signature, issuer, audience, or application policy.

Recommended next steps

JWT exp Claim Is a StringFix an exp claim encoded as text instead of a NumericDate number.JWT Expired TokenDecode an exp claim and understand the decoder's Expired status.JWT Decoder OnlineDecode JWT header and payload data locally in the browser.

Debugging a specific JWT issue? Browse JWT troubleshooting.