Decode tokens and text
Token inspector
Header
Payload
| Field | Date | When |
|---|
Base64 and hexadecimal
These bytes are not UTF-8 text.
URL encoder and analyzer
Parts of the address
Query parameters
| Key | Value |
|---|
No parameters.
Timestamp converter
How it works
Pick a module at the top. JWT token: paste a token to read its header and payload, with its issue and expiry dates and a Valid or Expired badge. Base64 and hex: type in any of the three boxes and the two others follow, accents and emoji included. URL: encode or decode special characters; paste a full address to edit its domain, path and parameters in a table. Timestamp: type a number of seconds or milliseconds to see the date, or pick a date to get the number. Everything happens in your browser as you type.
Questions
Is it safe to paste a real token here?
Yes: the token is decoded by your browser and never sent anywhere; the page is not allowed to contact any other site and nothing is saved. A token still grants access while it is valid, so do not paste it into sites you do not trust.
Does “Valid” mean the token is genuine?
No. It only means the current time is within its dates (nbf and exp). Checking the signature needs the key of whoever issued the token; only your server can do that.
Why do accents or emoji break other Base64 tools?
Base64 encodes bytes, not letters. This tool first turns the text into UTF-8 bytes, so “é” or “😀” come back exactly. When Base64 or hex hold binary data that is not text, the text box says so instead of showing garbage.
How do I change one parameter of a long link?
Open the URL module and paste the link in the Decoded box: its protocol, domain, path and every parameter appear in a table. Change a value, remove or add a parameter, and the full link is rebuilt and encoded as you type, ready to copy.
Seconds or milliseconds: how does it know?
From the length of the number: up to 11 digits are seconds (Unix time, used by JWTs and most servers), 13 digits are milliseconds (JavaScript, Java). The unit used is shown under the field, and you can force seconds or milliseconds.
Does it work offline?
Yes. Once the page is open, every module works without a connection: nothing is fetched while you use it.