Developer tool · browser-only
JWT decoder for inspection.
Decode a JSON Web Token and inspect its header, payload, and expiry locally. The signature is never verified here.
Develop
Decode a JWT token
Paste a three-part JWT below. Use this only for inspection; decoding does not prove that a token is authentic.
Header
Decoded header will appear here.
Payload
Decoded payload will appear here.
Decode JWT tokens online
A JWT decoder helps you inspect claims, token type, algorithm labels, and timestamps while debugging an API or authentication flow. PicoBento displays the readable header and payload without uploading the token.
JWT signature warning
Base64url decoding is not authentication. Never trust a decoded claim until your application has verified the signature and applied its own authorization rules.
Does this JWT decoder verify signatures?
No. It only decodes the header and payload and reports an expiry claim when one is present.