Decode JSON Web Tokens live in your browser. Inspect header algorithms, payload claims, human-readable expiration dates, and verify HMAC signatures. 100% browser-based.
JSON Web Token (JWT) is an open, RFC 7519 industry standard for securely transmitting information between parties as a compact JSON object. JWTs are digitally signed and commonly used in modern web applications, microservices, and OAuth 2.0 / OpenID Connect authentication flows to convey user identity and permissions.
A JWT string consists of three distinct parts separated by dots (.):
1. Header: Specifies the signing algorithm (e.g., HS256, RS256) and token type (JWT).
2. Payload: Contains the claims (user data, expiration timestamp exp, issued at iat, issuer iss).
3. Signature: Ensures the message wasn't tampered with along the way.
Authentication tokens frequently contain sensitive user IDs, roles, email addresses, and session scopes. Sending live tokens to a third-party server to decode them creates a severe security risk of credential interception. TrenTyx performs 100% of its Base64URL decoding locally inside your browser using standard JavaScript APIs, ensuring zero external network transmissions.