diff --git a/panel/io/state.py b/panel/io/state.py
index efbfe8bb11..d610c7497c 100644
--- a/panel/io/state.py
+++ b/panel/io/state.py
@@ -926,7 +926,10 @@ def access_token(self) -> str | None:
         access_token = self._decode_cookie('access_token')
         if not access_token:
             return
-        decoded_token = decode_token(access_token)
+        try:
+            decoded_token = decode_token(access_token)
+        except Exception:
+            return access_token
         if decoded_token['exp'] <= dt.datetime.now(dt.timezone.utc).timestamp():
             return None
         return access_token