Encoder / decoder

Convert text to and from the encodings you meet in URLs, headers, logs and tokens. Encoding is not encryption: anyone can reverse it, so it never protects a secret.

Runs entirely in your browser. Nothing you enter is sent to a server or stored.

Encode / decode

Input

Output

The result appears here as you type.

JWT decoder

Decode only — the signature is NOT verified.

Anyone can create a token containing any claims they like. What you see below is only what the token says; whether it is genuine can only be decided by checking the signature with the issuer's key, on the server that relies on it.

Token

Decoding happens on your device, but a live token is still a credential — prefer expired or test tokens.

All tools