# JWT decoder

Decode a JSON Web Token to see its header, claims and expiry, entirely in your browser.

## How it works

A JWT is three Base64URL parts: header, payload and signature. Decoding reads the first two; checking the signature needs the key.

## Questions

### Is it safe to paste a token here?

Decoding happens in your browser and nothing is sent. Still, treat live tokens like passwords.

### Is a decoded token valid?

Not necessarily. Only verifying the signature with the right key proves it.

## Related tools

- [Hash generator](https://powertraces.com/tools/hash-generator)
- [Base64 & URL encoder](https://powertraces.com/tools/base64-url)
- [UUID & ULID tool](https://powertraces.com/tools/uuid-ulid)
- [SLO & error budget calculator](https://powertraces.com/tools/slo-error-budget)

[All tools](https://powertraces.com/tools)