Developer tools to decode JWT and SD-JWT tokens. Inspect headers, claims, expiration, and disclosures for OAuth2 and OIDC—entirely client-side.
Note: JWTs are secret credentials for websites and APIs. As they grant access to protected resources they shouldn't be shared. All operations on this page remain in the browser (client-side) and are never shared or saved.
Token Builder
Create unsigned JWTs (alg: "none") for testing and development purposes.