Base64URL Decoder
Paste a URL-safe Base64 string, such as a JWT segment, and read the text inside immediately.
Processed locally in your browser/ Your data stays in your browser.
What is Base64URL Decoder?
Base64URL swaps the "+" and "/" of ordinary Base64 for "-" and "_" and usually leaves out the "=" padding. It appears in JWTs, WebAuthn responses, signed URLs, session cookies and many API tokens.
This decoder is lenient on purpose: it strips whitespace, accepts both alphabets, restores missing padding and reads the bytes as UTF-8 (or Latin-1 on request). If the bytes are not text, you get a warning instead of a crash.
How does it work?
- Paste the Base64URL value; decoding runs as you type.
- Choose UTF-8 or ISO-8859-1 if the source text used a legacy encoding.
- Copy the result. For a whole token with header, payload and signature, use the JWT Decoder instead.
Common use cases
- Reading the JSON header or claims of a JWT segment without a full JWT tool.
- Inspecting a state or cursor parameter that an API hides behind Base64URL.
- Checking what a signed-URL payload or cookie value actually contains.
- Verifying the output of your own Base64URL encoder against a second implementation.
Examples
Try this input in the tool above:
SGVsbG8sIEJhc2U2NFVSTCEgPj4-Pz8_
Hello, Base64URL! >>>???
Privacy
Base64URL Decoder runs entirely in your browser. The text or files you provide are processed on your device and are not uploaded, logged or stored on our servers.
Limitations
Decoding does not verify a signature or prove the content is trustworthy, and binary payloads cannot be displayed correctly as text.
Frequently asked questions
Do I need to add "=" padding before decoding?
No. Missing padding is restored automatically, so both "Zg" and "Zg==" decode to "f".
Why does it say the input is invalid?
A single leftover character (length mod 4 = 1) or a symbol outside A–Z, a–z, 0–9, "-" and "_" cannot be Base64URL. Look for truncated text, quotes or a dot from a JWT.
Can it decode a full JWT?
Decode each dot-separated part separately here, or paste the whole token into the JWT Decoder to see header and payload side by side.
Related tools
Base64URL Encoder
Turn any text into a Base64URL string that can be pasted straight into a URL, a filename or a JWT segment.
Encoding & Decoding
Base64 Decoder
Paste a Base64 string and read the original text instantly, even when the padding is missing.
Encoding & Decoding
JWT Decoder
Paste a JWT to read its header and payload as formatted JSON, with issue, not-before and expiry times translated to real dates. Decoding is not verification.
Developer Tools
JWT Inspector
Go beyond decoding: see every header parameter and claim explained, plus practical warnings about how the token is built.
Developer Tools
URL Decoder
Turn %20, %3A and %C3%A9 back into readable text, and find out exactly where a malformed sequence sits.
Encoding & Decoding
Base32 Decoder
Paste a Base32 string and get the original text back, with a precise message if a character or length is wrong.
Encoding & Decoding