Decode a JWT

What it can do

• Separate JWT segments
• Decode the JOSE header
• Pretty-print payload claims

How the recipe works

Demonstration

Sample input

eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJkZW1vLXVzZXIiLCJyb2xlIjoiYW5hbHlzdCIsImlhdCI6MTcwNDA2NzIwMH0.

Expected result

demo-user

When to use it

• Debugging authentication flows
• Reviewing token claims
• Explaining JWT structure

Adapt it

Use JWT Verify when you also have the correct verification key. Decoding alone does not prove authenticity.

Source and verification

Adapted from kraven-security CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.