Decode a JWT header and payload locally to inspect the token's visible claims.
Read the encoded JSON sections of a token when debugging authentication or inspecting a test fixture. Claims such as issuer, audience, and expiry can help explain a client issue. Treat their contents as untrusted until the token has been verified by the appropriate service.
Paste a test JWT and inspect its exp claim alongside its issuer. Compare the expiry timestamp with the behavior of your test application.
Decoding is not signature verification, authorization, or decryption. Do not treat a readable payload as proof that a token is authentic.
Paste a token to decode it, or edit the header and payload for encoding. Review the JSON values and choose the relevant action. Copy the output and verify its intended use in your own environment.
Decoding is not signature verification, authorization, or decryption. Do not treat a readable payload as proof that a token is authentic.
No registration, no tracking of your content, no server uploads. Don't just take our word for it:
Your files and text are processed entirely on your device. Nothing is ever sent to us.
Once loaded, this tool keeps working with your Wi-Fi turned off. Try it.
Open your browser's DevTools → Network tab. You'll see zero requests carrying your data.
Discover other powerful utilities designed to supercharge your workflow and boost productivity.
Turn JSON data into TypeScript interface declarations ready to review and copy.
Generate TypeScript interfaces from a JSON sample with configurable property and export options.
Decode TOON into JSON and review the reconstructed data in your browser.