Decode JWT header and payload locally. This does not verify signatures.
Never paste a production token into a shared or untrusted device.
Inspect token claims
Paste a JWT to decode its header and payload. This tool does not verify signatures, check expiry, or make the token safe. Treat decoded claims as untrusted input.
Privacy
Decoding happens locally. Avoid pasting production tokens on shared devices.