Decode a JWT header and payload locally in your browser.
JWTs (JSON Web Tokens) encode their header and payload in Base64URL, not encryption, so anyone can read them. This tool decodes that data for inspection only — it does not verify the signature, and cannot confirm a token is authentic or unexpired.