JWT Decoder
Paste a JSON Web Token to inspect its header and payload — decoding is instant and offline.
About this tool
JWTs are only base64url-encoded, not encrypted — anyone holding the token can read it, which is exactly what this tool does. It does NOT verify the signature: a valid-looking token can still be forged, so never trust claims without server-side verification.