CraftSprint
178 free tools · CraftSprint AI · 100% in your browser
Paste a JSON Web Token to instantly decode its header and payload. Decoding happens locally — no token data is sent anywhere.
JSON Web Tokens (JWTs) carry login and permission data between apps. This decoder splits a token into its header and payload and shows them as readable JSON, which helps when debugging authentication.
Paste a token to see the algorithm, the claims and, where present, the expiry time. Decoding is not the same as verifying: this tool does not check the signature, so never trust a token just because it decodes.
Tokens are decoded in your browser and are never sent to a server. Even so, avoid pasting live production tokens into any website.
No, this only decodes the header and payload for inspection; it does not verify the signature.
No, decoding happens entirely in your browser using Base64URL decoding.
