Converter
JWT Decoder — Inspect Tokens in Your Browser
- Decode
- Parse
- Mobile Friendly
- Accessibility Tested
- SEO Optimized
- Fast Loading
- Responsive
Version 1.0.0 · Last reviewed
How it worksShow guide
Introduction
Paste a JWT to view its header and claims as JSON. Decoding does not prove the token is authentic.
Step-by-step
- Paste the three-part JWT
- Decode to view header and payload
- Copy JSON as needed
Worked example
A typical JWT splits into header.payload.signature. This tool base64url-decodes the first two parts only.
Use cases
- Inspect access-token claims during development
- Check expiry (exp) and subject (sub) fields
- Debug malformed tokens offline
Frequently asked questions
Does this verify signatures?
No. Verification needs the secret or public key and must happen on a trusted server for real auth.
Is my token uploaded?
No. Decoding stays on this device.
Related tools
-
JWT Builder
Build and sign JWTs locally with HS256/384/512 (or unsigned none), claim presets, and editable header/payload JSON.
-
Base64 Encode / Decode
Encode text to Base64 or decode Base64 back to UTF-8 text in your browser.
-
JSON Formatter
Beautify, minify, and validate JSON in your browser — private and free.
-
Hash Generator
Generate SHA-1, SHA-256, SHA-384, or SHA-512 digests in your browser with Web Crypto.
Popular tools
-
API Workbench
Browser-native API client — build or paste cURL requests, inspect responses, manage collections, and store everything in IndexedDB. No backend required.
-
AES Encrypt / Decrypt
Encrypt and decrypt text with AES-GCM or AES-CBC locally. Passphrase (PBKDF2) or raw keys, custom IV/salt, and portable JSON packages.
-
Line Sorter & Deduplicator
Sort lines alphabetically or by length, remove duplicates, and trim empty lines — locally in your browser.
Was this helpful?
Your feedback stays on this device only — it is not sent to the Bestrao team yet.