Cyber

JWT Decoder

Read a token's header, payload and expiry. Decode only, nothing leaves your browser. Runs entirely in your browser, nothing is stored.

Decode only. The signature is not verified, so don't trust the contents for security decisions. Your token never leaves this browser.

Need more than a free tool?

Qawex builds, secures and grows websites and systems. Talk to a person.

Related tools

Strong random passwords with a strength meter. Generated on your device, never sent anywhere.

SHA-1, SHA-256, SHA-384 and SHA-512 hashes, computed in your browser.

Check a password against billions of leaked ones. Only a 5-character fingerprint prefix is ever sent.

See how long a password would take to crack, with feedback. Everything stays on your device.