JWT Decoder
Paste a JSON Web Token to read its header and payload. The token stays in your browser, but treat real tokens like passwords all the same.
Header
Payload
About JWTs
A JSON Web Token has three parts separated by dots: a header, a payload and a signature. The header and payload are just Base64URL-encoded JSON, so anyone holding the token can read them. Never put secrets in a JWT payload.
This tool only decodes. It does not check the signature, because that needs the secret or public key of the service that issued the token.