Encoding & Security
JWT Decoder
Inspect the header, payload and expiry of a JSON Web Token.
Decoding is not verification
This tool reads the token, it does not check the signature. Never trust a JWT's contents without verifying it against the issuer's key on your server.
Guides that cover this
Encoding, hashing and encryption are three different thingsHow encoding, hashing and encryption differ, what Base64, percent encoding and HTML escaping are actually for, and how to recognise an unknown string on sight.What a JSON Web Token actually containsInside a JWT, the header, payload and signature explained, the standard claims, and why Base64url decoding a token is not the same as verifying it.
Related tools
Encode text to Base64 and decode it back, with full Unicode support.
Encoding & Security
Compute SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or files.
Encoding & Security