Loading…
Loading…
Decode JWT header and payload claims in your browser. Free, private, and explicit about not verifying signatures.
Drop a Bearer token or raw header.payload.signature string.
Header and payload are base64url-decoded and pretty-printed as JSON.
See exp/iat times and copy JSON — verification is intentionally skipped.
Decode without installing CLI tools or posting to a server API.
Token never leaves your browser for this tool.
exp/iat/nbf shown as ISO times when present.
We never claim to verify signatures — decode only.
Quick answers about tools, privacy, limits, and pricing.
No. Verification requires the secret or public key and a trusted crypto library. This tool only decodes the base64url segments so you can read claims.
Prefer not to paste high-privilege production tokens into any third-party site. This page processes tokens locally, but browser extensions can still observe them.
Yes. Daily decode limits may apply by account tier.
JWTs need at least two dot-separated segments. Truncated tokens, wrong padding, or non-base64url characters will fail to decode.
Keep working with similar free tools — no signup required for most.
Format, validate and beautify your JSON data instantly
Open toolGenerate Schema.org JSON-LD structured data for SEO rich results
Open toolEncode and decode Base64 strings in real-time
Open toolGenerate random UUID v4 / GUID values in bulk
Open toolConvert Unix epoch seconds/ms to dates and back
Open toolEncode and decode URL / URI components with percent-encoding
Open tool