JWT Decoder
Decode a JSON Web Token header and payload locally. Signatures are not verified.
Private by design. Your input never leaves this browser. Conversions run locally on your device.
What this tool handles
- Splits the token on its dots and base64url-decodes the header and the payload.
- The signature is shown but never verified — verification needs the signing key.
- Registered claims such as exp, iat and nbf are shown as readable dates alongside their raw values.
- A malformed segment is reported rather than guessed at.
Related tools
- Base64 Encode / Decode — Encode and decode Base64 and Base64URL with correct UTF-8 handling.
- URL Encode / Decode — Percent-encode or decode text, or break a full URL into its parts.
- cURL → code — Translate a cURL command into fetch, axios or Python requests code.
- Hash Generator — Compute SHA-256, SHA-384, SHA-512, SHA-1 and MD5 digests of text or a file.