Paste a JWT (JSON Web Token) and this decodes the base64url-encoded header and payload, formats them with syntax highlighting, and extracts common claims like expiration, issue time, issuer, and subject. The signature is shown as a hex fingerprint. Everything runs locally – your token never leaves this page.