JWT Decoder

Paste a token and inspect the header and payload. Nothing leaves your browser.

Decode only — this tool does not verify the signature. Never paste production secrets into web tools.