Decode a JSON Web Token locally to inspect its header and payload. Decoding does not verify the token's signature or prove that the token is authentic.
🔒 Your file is processed locally in your browser whenever supported. This tool runs entirely on your device — nothing you type or upload is sent to a server, logged, or stored.
No. Decoding only reveals the header and payload. Verifying authenticity requires checking the signature against the issuer's secret or public key, which this tool does not do.
Decoding runs locally in your browser and nothing is transmitted. Even so, avoid pasting production secrets or long-lived tokens into any website.
| Platform | Supported | Offline | Local | Server | Network |
|---|---|---|---|---|---|
| WEB | Yes | Yes | Yes | No | Not required |
| PWA | Yes | Yes | Yes | No | Not required |
| ANDROID | Yes | Yes | Yes | No | Not required |
| IOS | Yes | Yes | Yes | No | Not required |
Decode Base64 back into readable text, locally.
Pretty-print and validate JSON with clear error messages.
Check whether text is valid JSON and see the parsed type.
Compute SHA-256, SHA-512 and fast non-crypto checksums of any text, locally.
Advertisement