JWT / Token Inspector

Paste a JWT or Microsoft Entra token to decode header, claims, and expiry locally. No data leaves your browser.

JWT / Token Inspector decodes JSON Web Tokens and Microsoft Entra ID tokens entirely in your browser. Paste a token into the extension popup to inspect its header, payload claims, and expiry. Nothing is sent to a server. WHAT IT SUPPORTS • Standard JWTs (header.payload.signature) • Microsoft Entra ID / Azure AD access tokens and ID tokens • JWE detection (encrypted 5-part tokens) • Opaque / reference tokens (detected when not a JWT) • Entra claim highlights: tid, oid, scp, roles, ver, appid, xms_* and more • Expiry status (valid, expiring soon, expired) • Copy decoded JSON HOW TO USE 1. Install and open the extension 2. Paste a JWT or Entra token into the text box 3. View header, claims, Microsoft highlights, and expiry 4. Optionally copy the decoded JSON PRIVACY • Paste-only workflow • No website access permissions • No accounts, analytics, or network calls • All decoding runs locally on your device Built for IAM engineers, developers, and security admins who need a fast, private token decoder.