cloak · jsonversal 100% in your browser
cloak / JWT Decoder

JWT Decoder

Paste a JSON Web Token to inspect its header and payload. Decoding happens locally — your token is never transmitted, logged, or stored.

Token

—

Header

Payload

—

Decoding shows the token's contents but does not verify the signature. Anyone can decode a JWT; only the holder of the secret can prove it is valid. Never paste a real production token into an untrusted site.