🎫 JWT Decoder

Decode a JSON Web Token's header and payload. This only decodes — it does not verify the signature, and the token never leaves your browser.

How it works

Splits the token and Base64-decodes its header and payload for inspection. Decoding is not verification — this tool can't check the signature, so never trust a token based on its contents alone.