Tools
Base64 / URL / JWT
Encode and decode Base64 and URL, and inspect JWT tokens. Everything runs in your browser.
Everything runs in your browser. Nothing is sent to any server.
About this tool
This tool encodes and decodes Base64 and URL, and inspects JWT tokens by showing their header, payload and expiry in a readable way. Everything runs in your browser, so no token or data leaves your machine.
- Encode or decode Base64 and URL components on the fly.
- Break a JWT into header and payload and check its expiration.
- Debug auth tokens without pasting them into sketchy online services.
Frequently asked questions
Is Base64 encryption?
No. Base64 is just a reversible encoding to carry data as text; anyone can decode it. Never use it to protect sensitive information.
Can I read a JWT without the key?
Yes, a JWT header and payload are Base64 and readable without the key. What you cannot do without the key is verify or forge the signature, which is what guarantees its authenticity.