Encode, decode, inspect
Paste anything: it is recognised automatically and shown in every common encoding. JWTs are decoded with readable dates (signatures are not verified).
How to use it
- 1Paste text, Base64, URL-encoded text, hex or a JWT.
- 2The format is detected and decoded automatically.
- 3Copy any of the conversions shown below it.
Related tools
Frequently asked questions
Does it verify JWT signatures?
No — it only decodes the header and payload. Never trust a token's contents without verifying its signature on your server.
Does it handle emoji and accented characters?
Yes. Everything is converted as UTF-8, so text like “Héllo ⚽” round-trips correctly.
What is the difference between Base64 and Base64URL?
Base64URL replaces + and / with - and _ and drops the = padding, so it is safe in URLs and file names — JWTs use it.
Is my token or text sent anywhere?
No. All decoding happens in your browser.