JWT decoder

Decode a JSON Web Token's header and payload. Decoding only — it does not verify the signature.

Never paste a production token into a website you do not control. This page decodes it locally, but treat any token as a credential.