Skip to content

JWT Decoder

Paste a JWT token to decode header and payload. Expiry and validity are shown. No signature verification.

Header 
—
Payload 
—
Expiry: —

Example

A JWT has three parts (header.payload.signature) in Base64URL. Paste a token and click Decode to see the header and payload as JSON. If the payload contains exp, we show the expiry time and whether the token is still valid.

FAQ

No. We only decode and display contents. Signature verification is not performed.
No. Decoding is done entirely in your browser.

Security Tools

Bcrypt Generator & Verifier

Generate hashes and verify passwords (server-side).

UUID Generator & Validator

Generate UUID v4 and validate. Bulk 1–1000, export TXT/CSV.

Random String Generator

Generate random strings. Length, uppercase, lowercase, numbers, symbols.

Password Generator

Generate strong passwords. Length, symbols, strength meter.

Hash Generator

MD5, SHA-1, SHA-256, SHA-512 hashes from text.

Unix Permission Calculator

Visual chmod checkboxes to octal and symbolic permissions.

JWT Encoder

Create HS256 JWTs with header, payload, and secret (Web Crypto).

HMAC Generator

Generate HMAC-SHA256 or HMAC-SHA1 with a secret key.