All tools
JWT Decoder
Decode a JSON Web Token's header and payload, with readable claims and an expiry check.
Runs entirely in your browser — nothing you paste is uploaded.
The signature is not verified. This decodes what a token claims, not whether it's genuine — anyone can craft a token saying anything. Decoding happens entirely in your browser, but avoid pasting production tokens into any web tool.