Decode a JWT returned by a login API
Paste the access token or refresh token returned by an authentication endpoint to inspect claims such as sub, name, email, roles and permissions.
Free • No signup • Fast
Decoding runs locally in your browser. Avoid pasting real production tokens unless you fully trust the context.
Related tools
Decode a JSON Web Token directly in your browser. Paste a JWT to inspect its header, payload, claims, expiration time and signature without sending the token to external servers.
Paste the access token or refresh token returned by an authentication endpoint to inspect claims such as sub, name, email, roles and permissions.
Use the exp, iat and nbf fields to understand when a token was issued, when it becomes valid and when it expires.
Copy the decoded header and payload when debugging API authentication, authorization issues, OAuth flows or test fixtures.
No. This tool decodes the header and payload so you can inspect the token content, but it does not validate or verify the JWT signature.
No. Decoding happens locally in your browser, so the token is not sent to external servers.
You can inspect standard and custom claims such as sub, iss, aud, exp, iat, nbf, roles, permissions and any other payload field included in the token.
Add or remove VAT at 22%, 10% and 4%.
Calculate percentages, discounts, increases and decreases.
Calculate profit and margin from cost and selling price.
Calculate percentage markup from product cost.
Estimate monthly take-home pay from gross annual income.
Find the original price from a discounted price and discount percentage.
Convert length, mass, temperature, volume and more.
Estimate token usage and approximate cost for AI model prompts.
Format, validate and minify JSON directly in your browser.
Encode and decode Base64 directly in your browser.
Convert Unix timestamps to readable dates and back.
Encode and decode URLs for query strings, APIs and redirects.
Generate UUID v4 identifiers for APIs, databases and tests.