BRev JWT decoder
JWT decoder — free
Decode a JSON Web Token — inspect its header, payload and claims, check expiry, and verify HS256/384/512 signatures. Your token and secret never leave your browser.
JSON Web Tokenheader, payload and claims — decoded on your device
This box is never remembered. Every other tool here restores what you last typed; this one deliberately does not, and never puts your token in a shareable link — a JWT is a bearer credential, so anyone holding it can act as you until it expires. Close the tab and it is gone.
Paste a token to begin. A JWT is three Base64URL parts —
header.payload.signature — and the first two are only encoded, never encrypted. Nothing here is uploaded; the secret you type stays in this tab.Decoded on your device — your token & secret never leave the browser.