PALLAS / CONVERTER

JWT Decoder

Decode a JSON Web Token into readable header and payload JSON. Signature presence is shown explicitly, but the signature is not verified.

Browser-localNo account

INPUT

Enter values

Method & formula

JWT compact serialization uses Base64url-encoded header and payload segments. PBT decodes those segments as UTF-8 JSON and displays common NumericDate claims. Decoding does not prove authenticity.

  • JWT = Base64url(header) . Base64url(payload) . signature
  • Decode header and payload only; do not infer signature validity
Example

Use the decoder to inspect alg, typ, sub, iat or exp claims while debugging an integration. Verify signatures separately with the issuer key and expected algorithm.

Sources & standards
FAQ

Does decoded mean verified?

No. Anyone can Base64url-decode a JWT. This tool deliberately reports Signature not verified.

Is my token uploaded?

No. Decoding runs locally in the browser.

Keep working

Base64 Encoder & DecoderEncode and decode Base64 locally for text or files, use Base64url and Data URIs, detect pasted input, drag and drop files, and preserve binary bytes.JSON Formatter & ValidatorFormat, validate, repair, minify and sort JSON locally, then inspect its tree, search paths and values, or compare structures with no upload.Hash GeneratorGenerate SHA-256, SHA-384 or SHA-512 hashes locally with hex, Base64 or Base64url output using the browser Web Crypto API.

PALLAS / SUPPORT

Report an issue

Tell us what went wrong. Technical context is attached automatically; your files and tool inputs are not.

Your email is required so we can follow up on this report. Do not include passwords, confidential files or sensitive source content. Privacy