JWT decoder

Split a JSON Web Token and read its header and payload. Decodes only, it does not verify the signature.

This decodes a token. It does not verify the signature, which would need the signing secret, and a secret has no business being typed into a public web page.

Runs entirely in your browser. Nothing you type or paste is sent anywhere.