JWT decoder
Split a JWT and decode header and payload as JSON. Does not verify signatures—never use for security decisions.
Paste a full JWT (three dot-separated parts).
FAQ
- Does it verify signatures?
- No—this only decodes. Tampering cannot be ruled out without proper verification.
You might also like
- JSON formatter
Paste JSON from APIs or config files, prettify or minify it, and catch syntax mistakes.
- Encoding kit
Switch tabs: Unix time ↔ rich date formats (sec/ms, offsets, relative time), batch UUID v4, UTF-8 ↔ Base64, URL encode/decode. Everything runs locally in your browser.
- Regex tester
Type a pattern, toggle flags, run against your text, and list each match with its index—handy for debugging regex locally.