Read the header and payload of a JSON Web Token, with its times explained. Decodes only — it does not verify the signature, and says so.
This decodes. It does not verify.
A JWT’s payload is base64, not encryption — anyone can read it, and anyone can write one. Nothing below tells you the token is genuine or unmodified. Only checking the signature does that, and it needs a secret or public key this page deliberately does not ask for: never paste a signing secret into a web page.
Verify on your server before trusting any claim you see here.
Format, validate and minify JSON in your browser — with the line, column and a plain-English reason when it will not parse.
Test a regular expression against sample text, with every match highlighted and each capture group listed.
Generate UUID v4, v7 or v1, or Nano IDs — one or hundreds at a time, from your browser’s cryptographic random source.
Explain a cron expression in plain English and see when it will actually run next.