Key claims
Header
Payload
Signature (not verified)
What this shows
A JWT is three Base64URL parts separated by dots: a header (algorithm and type), a payload (the claims), and a signature. This tool only decodes the first two — it does not and cannot verify the signature, so never treat a decoded token as trusted or authentic.
The token is processed only on this page and is deliberately not saved anywhere — not even in this browser. Reload and it is gone.