Base64 Encoder & Decoder
Encoding Local only
JWT Decoder
Local onlyInspect a JWT header, payload, and time claims without sending the token anywhere.
JWT structure Header Payload Signature
Ready
Signature not verified Decoded locally on this device
JWT
Paste a JWT here…
Header
0 characters
Payload
0 characters
Signature
0 characters
Inspect a JSON Web Token
Paste a JWT to reveal its Base64URL header, payload, and readable time claims without uploading it.
Decoded locally. The signature is not verified.
How to use it
- 01
Paste a token
The JWT stays in memory in this page and is not persisted.
- 02
Decode its contents
Review formatted header and payload JSON plus common time claims.
- 03
Verify separately
Decoding does not validate the signature, issuer, audience, or trustworthiness.
Frequently asked questions
Does decoding verify the signature?
No. A decoded token may be forged or modified. Verify it with the correct key and expected claims in your application.
Is my token saved?
No. Nobuf does not intentionally persist the token or send it over the network.
Related tools
Keep working with other private browser utilities.