Case file · Nº 02

The Decoder

Paste a token, a blob of Base64, a timestamp or a GUID. It works out what it is and cracks it open – right here in your browser.

Waiting for evidence
Try

Everything happens in your browser – nothing you paste is sent to gorgemuld.dk. JWT signatures are not verified; a token that decodes isn't necessarily genuine.