Base64 Encode and Decode
Encode text to Base64 or decode Base64 back to text, with URL-safe mode.
JWT Decoder
See what is inside a JWT. This tool only decodes the token, it does not verify it, and nothing is sent anywhere.
Your files stay with you. Your files never leave your browser. This tool runs on your device: nothing is uploaded to our servers, so there is nothing for us to store or see.
How to use it
- Paste your token (a leading Bearer is fine).
- Read the header, payload and the dates for iat, nbf and exp.
- Copy any part you need.
Questions people ask
Does this verify the token?
No. It only decodes the header and payload, which are plain Base64URL-encoded JSON. It cannot tell you the token is genuine, because verifying needs the secret or public key. Always verify signatures on your server.
Is it safe to paste a real token?
The token is decoded in your browser and not sent to us. Even so, a live token is a credential, so prefer test tokens and never share production tokens publicly.
What do exp, iat and nbf mean?
exp is when the token expires, iat when it was issued and nbf the time before which it must not be accepted. They are Unix timestamps, shown here in UTC and India time.
Why can it not read my encrypted token?
Tokens with five parts are JWE (encrypted) tokens. Their content is hidden without the decryption key.
Want this inside your own account?
Marketiism keeps your invoice numbers, GST reports, UPI payment links and WhatsApp reminders in one place. Leave your details and we'll call to set it up for your business, or start the trial yourself.
More Developer tools
JSON Formatter
Format, validate and minify JSON, and see exactly which line has a mistake.
Unix Timestamp Converter
Convert Unix timestamps to dates and dates to timestamps, with India time.
JSON to CSV
Turn a JSON list of records into CSV for Excel or Google Sheets.
CSV to JSON
Convert CSV rows into a JSON list, with numbers and true/false detected.
YAML to JSON
Convert YAML config files into JSON and catch indentation mistakes.