JWT decoder
Decode a token’s header and payload.
Input
Output
Output appears here as you type.
What this does
Splits the token, base64url-decodes the header and payload, and renders the claims. Timestamp claims (`exp`, `iat`, `nbf`) are shown as readable dates alongside their raw values.
Limits
- Decoding only. The signature is not verified, and a decoded token is not a trusted token.
- Never paste a production token into a tool that uploads it. This one does not, and you can confirm that in your network tab.
Is this private?
Yes, and you can check rather than take our word for it. Open your browser's network tab and run the tool: your file never appears in it, because there is no server to send it to. The whole site is static files.