Decode a JWT token.
Paste one on the left, or
HS256 · HS384 · HS512 verify · RS/ES decode-only · nothing uploaded
0 characters
Decoding happens entirely in your browser — there is no server involved, and nothing you paste here is ever uploaded or sent anywhere.
Decoded header, payload, and claims will appear here once you paste a token.
Algorithm—
Type—
—
Signatures can only be verified with the matching secret or public key — decoding alone proves nothing.