How to use this developer tool
Decode a JSON Web Token header and payload for inspection.
How the processing works
- Splits the token into header, payload, and signature parts.
- Base64URL-decodes the header and payload.
- Formats exp, iat, and nbf timestamps when available.
Example
Paste a development JWT to inspect its payload claims and expiration time.
Using the output
Use the output as a practical starting point, then review it before using it in an important workflow.
Assumptions and limitations
- Decoding does not verify the signature or prove the token is trustworthy.
- Do not paste sensitive production tokens unless you understand the risk, even though processing is local.
Frequently asked questions
Does this require an account?
No. The core tool works without creating a Tool2Do account.
Is my input included in share links or analytics?
No. Tool2Do share actions use the tool page URL and safe metadata, not private values or uploaded files.