Decode and inspect JSON Web Tokens
Paste a JWT to see its header and payload as readable JSON, or build a token from scratch to test with. Everything happens in your browser, so tokens are never sent to a server. That matters, because pasting production tokens into random websites is how they leak.
Frequently asked questions
Is my token sent anywhere?
No. Decoding happens entirely in your browser.
Does the builder sign tokens?
No. Built tokens carry a signature placeholder, which is enough for testing parsers and claims but will not pass signature validation.