Decode.

Paste a value and decode it. Base64, Hex, and JWT are auto-detected; override the guess with the format picker. JWTs are decoded into header and payload with security flags (alg:none, expired, not-yet-valid) — the signature is shown but not verified. Everything runs in your browser; nothing is sent anywhere.

Type text and encode it to Base64 (standard or url-safe), Hex, or URL percent-encoding. Everything runs in your browser; nothing is sent anywhere.