Loading
Inspect JWT header and payload data without verifying its signature or authenticity.
DeveloperAll decoding happens locally in your browser — your token never leaves this page.
{
"alg": "HS256",
"typ": "JWT"
}{
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
}SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
Cannot verify signature without the secret key.
Paste a demonstration JWT.
Inspect the decoded header and payload.
Read time claims as data and verify the token in your own trusted system.
Found incorrect guidance or a result? Send the team steps and a non-sensitive example.
Convert a JSON array of objects into CSV text for copying or download.
Format, minify and check JSON syntax with selectable indentation in your browser.
Encode UTF-8 text as Base64 or decode Base64 back to text; this is not encryption.
Encode or decode a URL component using percent encoding.
Convert YAML to JSON or JSON to YAML, then inspect the resulting data types.
Test JavaScript regular expressions with flags, match highlighting and capture groups.