JWT Decoder
Decode a JWT's header and payload
Paste a JWT and it splits on the dots, base64url-decodes the header and payload, and pretty-prints both as JSON. If the token carries iat, nbf, or exp claims, those get shown as readable UTC and local times too. It only decodes, the signature is never verified, since that would need the secret or public key. Nothing is sent anywhere, it all runs in your browser, no login or backend.
Note: this only decodes the JWT, it does NOT verify the signature, which would need the secret or public key. Everything runs in your browser and nothing is sent anywhere. Don’t paste tokens you don’t want visible on this screen.
