How it works
A JWT is three Base64URL parts: header, payload and signature. This tool decodes the first two so you can read the claims. It does not verify the signature.
Frequently asked questions
Is it safe to paste a real token?
Decoding happens in your browser and nothing is sent. Still, avoid pasting live production tokens into any website.