Paste any JSON Web Token? to instantly decode its header, payload, and signature. Timestamps converted to human-readable dates. Your token never leaves your browser.
When you sign in to an app or website, it often hands your browser a long coded string that proves who you are — a bit like a wristband at an event. Those strings turn up in support tickets, error logs, and browser tools, and they look like gibberish.
Paste one here to see what’s actually written inside: who it was issued to, what it allows, and whether it has already expired. Handy when a login mysteriously stops working. Nothing you paste leaves your computer.