Client-side
JWT Decoder
Paste a JWT to read its header and payload. Signature is not verified - do not trust decoded data for auth decisions.
No signature verification. Anyone can craft a JWT with arbitrary claims. Use this for debugging only - never authorize users based on decoded content alone.
Wrong tool? Back to the stash.