JWT Decoder

Decode a JSON Web Token's header and payload, read expiry/issued-at claims, and verify HS256 signatures — all in your browser, the token never leaves your machine.

Everything runs in your browser — the token and secret are never sent anywhere.

Other tools