JWT Decoder

Paste a token and read what is inside it. A JWT is signed, not encrypted, so the header and payload are plain text to anyone holding the token. The signature is shown but not checked: that needs the key, and your key does not belong in a web page.