What decoding reveals
JWT segments use Base64URL encoding. Decoding exposes algorithm metadata and claims such as subject, audience, issuer, and expiration.
Core transformations run locally in your browser.
Decode JSON Web Token headers and payload claims locally without uploading the token.
Paste a compact token to inspect its JSON header and payload.
JWT segments use Base64URL encoding. Decoding exposes algorithm metadata and claims such as subject, audience, issuer, and expiration.
Anyone can construct a token payload. Verify the signature and expected claims before trusting a token in an application.