Runs in your browser. Stays on your device. Privacy

JWT decoder

Decode header and payload, then verify signatures with your secret or public key. Tokens never leave your device.

JWT token

Secret or public key stays in your browser. We never send tokens to a server.

Paste a token to decode.