JWT decoder

Paste a token to see what's inside. It never leaves this page.

This page only reads the token. It does not check the signature, so a readable token isn't proof that it's genuine. Tokens are encoded, not encrypted: don't put secrets in them.