Dev · Client-side only
JWT decoder
Decode any JSON Web Token to inspect its header, payload, and expiry. Nothing leaves your browser — safe for staging tokens.
Paste a token above to decode.
Your token never leaves this page.
All decoding happens in your browser via atob. We don't log, store, or send anything anywhere. Still — never paste production tokens into any online tool.