In development. RVNT is pre-release — not yet security-audited. Source code, public builds, and the iOS / App Store release aren’t available yet. See the roadmap →

JWT Decoder

Decode a JSON Web Token, locally.

Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.

Paste a JWT to read its decoded header and payload as formatted JSON, with the expiry and issued-at times shown in plain language. Nothing leaves your browser.

 
 
 
 
 
 
 
  
 
 
Frequently asked questions
 
 
 Does this verify the signature? 
No — verifying a signature needs the secret or public key and should happen on your server. This tool decodes the readable header and payload (which are only Base64URL-encoded, not encrypted).
 
 Is it safe to paste a real token here? 
Decoding happens entirely in your browser and the token is never transmitted — but treat any live token as a secret and avoid pasting production credentials into any web tool out of habit.
 
 
 
 
 
 
 
Related tools
 
    Password Generator Strong, random passwords — generated locally.     Hash Generator SHA-1, SHA-256, SHA-384 & SHA-512.     HMAC Generator Keyed HMAC: SHA-256 / 384 / 512.   
 
 
 
 
 
Built by a privacy company
 
These tools never phone home — the same principle as RVNT itself: a post-quantum, end-to-end-encrypted, peer-to-peer messenger with no servers and no tracking.
 
 Get RVNT All tools