Paste a JWT to inspect header and payload. Decoding is local; the signature is not verified.
—
—
—
A JSON Web Token has three Base64URL parts: header, payload and signature. DevsDrill only decodes the first two in your browser — useful when you need to inspect claims without pasting secrets into a third-party site.
No. Verification needs the signing secret or public key. This tool only decodes and displays claims.
No. Everything runs in your browser.