Client-side tool

JWT Inspector

Inspect a JSON Web Token without sending it to a server. This decodes the header and payload only; it does not verify the signature.

Processing stays in your browser

Encoded token

Decoding is not verification. Never trust token claims until your application verifies the signature and expected issuer/audience.

Header

Decoded JSON appears here

Decoded JSON appears here