JWT Decoder

Decode a JWT's header and payload — your token never leaves your browser.

About this tool

A JWT has three Base64URL parts: header, payload, and signature.

Decoding is not verifying

This decodes for inspection; it does not verify the signature.