JWT Decoder

7 tools

Decode a JWT's header and payload.

100% client-side — nothing you process is ever uploaded

A complete encoding toolkit — Base64 and URL encode/decode, convert files to and from Base64, encode/decode HTML entities and Base32, convert internationalized domain names with Punycode, and decode or sign JWTs. All directly in your browser, which matters since tokens and encoded data often carry sensitive information.

Base64 & URL JWT Decoder JWT Generator File ↔ Base64 HTML Entity Encode/Decode Base32 Encode/Decode Punycode (IDN) Converter

JWT

A JWT must have exactly 3 dot-separated segments.

How to use this tool

1Paste a full JWT (three dot-separated segments).
2The Header and Payload decode and pretty-print automatically.
3Copy either section as formatted JSON.

Frequently asked questions

Does this verify the signature?

No — it only decodes the header and payload segments; it cannot confirm the token is valid or untampered.

Is it safe to paste a real JWT here?

Decoding happens entirely in your browser and the token is never sent anywhere, but still treat JWTs like passwords.