JWT Decoder
Opens up a JSON Web Token so you can read its header and contents. It does not check the signature.
This tool runs entirely in your browser. Nothing you enter is uploaded, transmitted or stored anywhere.
Common questions
Does this verify the token is genuine?
No, and it deliberately cannot. Verifying a signature needs the secret or public key, which you should never paste into a web page. This tool only reads the parts of the token that are already plain text.
Is my token sent anywhere?
No. The decoding happens in your browser. That said, a real token is a credential, so treat it carefully wherever you paste it.