Base64 Encode / Decode
Free online Base64 encoder and decoder.
JWT Decoder
Paste a JSON Web Token below to see its decoded header and payload, plus a plain-English readout of the expiry (exp), issued-at (iat) and not-before (nbf) claims.
Private by default: processing stays on your device
YOUR TOKEN
Paste a JWT to decode
Decoding only — the signature is not verified. A “not expired” readout does not mean the token is valid or trustworthy.
Read the claims.
Header and payload, decoded on your device. Never verified, never sent.
Header
Payload
Good to know
A leading “Bearer ” prefix is stripped automatically. Expiry notes describe the payload only — they say nothing about the signature.
Example payload
Input
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0IiwibmFtZSI6IkFkYSJ9.sigOutput
{
"sub": "1234",
"name": "Ada"
}These buttons share the page link, not your input.
Want to include your text?
Your current input will be stored in the link after the # symbol, not uploaded to Handy Browser Tools. Anyone with this link can read that text. If you send or post it, the service you choose also receives the link. Do not include passwords or private information.
Frequently asked questions
Is it safe to paste a real token here?
The token is decoded entirely in your browser and never transmitted. Still, treat production tokens as secrets; prefer expired or test tokens when possible.
Does this tool verify the signature?
No, it decodes and displays the token contents. Signature verification requires the signing secret or public key and should happen on your server.
Why does my token fail to decode?
A JWT must be three Base64URL segments separated by dots. Check you copied the whole token without wrapping quotes or a 'Bearer ' prefix (the tool strips 'Bearer ' automatically).
Related tools
JSON Formatter
Format, beautify and validate JSON instantly in your browser.
Hash Generator
Generate MD5, SHA-1, SHA-256 and SHA-512 hashes from text online.