JWT Decoder

Decode JSON Web Tokens and optionally verify HMAC signatures — nothing ever leaves your browser.

Runs locally — nothing you paste or enter leaves your device

Header


          

Payload


          

Verify signature (optional)

Decoding happens locally; the secret is never sent anywhere.