Free tool · 🔁 Base64, URL, JWT & hash
Encode. Decode.Inspect.
The six conversions developers and support engineers do fifty times a day, in one box. JWT decoding shows the expiry in plain language.
JWT signatures are not verified here on purpose — never paste a secret into a web page.
What it checks
Everything we would look at first on a client call.
Free, no sign-up, no email gate. If the report shows red, the fix is written next to it — and we are one click away if you would rather we did it.
- Base64 (UTF-8 safe), URL and HTML-entity encode/decode
- JWT header + payload with expiry check
- Hex byte view and SHA-256 via Web Crypto
FAQ
Common questions
Is Base64 encryption?
No — it is encoding. Anyone can decode it. Use it for transport, never for secrets.
Why does my JWT say expired?
The exp claim is a Unix timestamp; we compare it with your clock. Refresh the token.