Browser-only
Generation and export both stay in the browser.
Paste a JWT and split it into the header, payload, and signature right in the browser.
Paste a JWT and inspect what it contains
Bearer prefixes are accepted. This tool is for decoding only and does not verify signatures.
Decoded output
When the JWT shape is valid, each section appears in a readable form.
Jump to other tools from here without leaving the page flow.
A stronger password preset for regular login use.
A safer preset that fits well in `.env` files and config values.
For API secrets and other shared secret values.
For URL-friendly tokens that allow only `-` and `_`.
For secrets that are easier to handle in hexadecimal form.
Turn a URL or text into a QR code.
Paste a JWT and inspect the header, payload, and signature.
Create placeholder images for mockups and layout checks.
Generation and export both stay in the browser.
Your input is never sent to a server.
Reloading clears the input and output.