How to use JWT decoder
Paste three base64url segments separated by dots. The header and payload pretty-print. Expired tokens are flagged. Signature bytes are shown but not validated, because verification needs the issuer’s key.
Open the tool
Use the workspace below — no signup is required.
Enter your input
Paste three base64url segments separated by dots. The header and payload pretty-print. Expired tokens are flagged. Signature bytes are shown but not validated, because verification needs the issuer’s key.
Copy the result
Copy text or download a file when the tool offers an export. Local tools keep processing in this tab.
About this tool
Paste a JWT to see its JSON header and payload, including iat/exp as human dates. This tool does not verify signatures — never paste a secret in a website you do not trust. Omnipus decodes locally.
Related guides
- Reading a privacy badge on Omnipus
What “Runs on your device”, “Fetches a public URL”, and “Uses a public rates API” mean in practice.
