JWT Decoder
InspectDecode standard Base64-URL encoded JWTs to inspect their claims natively in your browser. Tokens never leave your machine.
gpp_bad
Critical Security Warning
Decoding a token does NOT verify its authenticity or signature. Payload claims can be easily manipulated by attackers. Do not trust this output without authenticating the HMAC or RSA signature cryptographically on your server.
Active
Expiration Time
...
Encoded JWT
Header (Algorithm)
Payload (Claims)
Signature (Base64Url)