HTTP Status Codes

Searchable reference of HTTP status codes.

This only decodes the token so you can read it — it does not verify the signature. A tampered or forged token can still decode without error.
Token

About this tool

  • A JWT has three Base64url segments separated by dots: header, payload and signature.
  • Decoding happens entirely in your browser — the token never leaves your device.
  • To actually verify a signature you need the issuer's secret or public key, which this tool intentionally never asks for.