Input
Output
Token
Header
Payload
Timestamps
Signature not verified
Base64 encoding handles full Unicode text (UTF-8) and understands both standard and URL-safe alphabets when decoding. URL mode uses the browser's own percent-encoding. HTML mode encodes the characters that matter for markup by default, with options for named entities and for encoding every non-ASCII character, and decodes both named and numeric entities. JWT decoding only reads the token — it does not check the signature, so never trust a token's contents without verifying it on your server. Everything runs on your device; nothing is uploaded.