JWT

Developer

JWT Decoder

Decode canonical three-segment JWTs, inspect header and payload JSON, and interpret exp, nbf, and iat timing locally. Signatures are never presented as verified.

Tool task stays in this browser

The TabPebble application does not send or persist tool input; ordinary requests that load the site are a separate data boundary.

Three-segment canonical unpadded Base64URL only · up to 1,000,000 Unicode characters · processed locally
Decoded result
Header, payload, and unverified signature status will appear here.

Three simple steps

How to use JWT Decoder

  1. 01

    Paste a canonical unpadded Base64URL JWT.

  2. 02

    Decode and check segment, alg, and signature consistency.

  3. 03

    Inspect timing, then copy or download the unverified JSON.

Privacy first

Tool data and site requests stay separate

Tool input and results are processed in temporary state for the current page. The TabPebble application does not send them to a server, write them to a database, or create processing history. Pages and code still load through ordinary network requests. Your browser may restore a tab, while downloads and clipboard copies remain on the device until you remove or replace them.

  • No tool-task upload
  • No account
  • No processing history

Read the complete privacy boundaries ↗

FAQ

Frequently asked questions

Does an active timing status mean the JWT is valid?

No. It only compares numeric exp and nbf claims with this device's current time. A token remains untrusted until cryptographically and semantically verified.

Is this tool free?

Yes. Core tools are free to use and do not require an account.

Does tool input go to a server?

No. The TabPebble application performs the tool task in your browser and does not put input into site requests; ordinary page and code requests still reach the hosting service.