Playground

JWT Decoder

Inspect a token's header and payload, check its expiry, and verify HMAC signatures. Everything runs in your browser — nothing is sent anywhere.