Discord Bot Token Validator

Check if a Discord bot token is correctly formatted and decode the bot ID and creation date from the token. Everything runs entirely in your browser — your token is never sent anywhere.

Never share your bot token publicly. If your token has been exposed, reset it immediately from the Discord Developer Portal.

How Discord Bot Tokens Work

A Discord bot token is a secret credential that authenticates your bot to the Discord API. It consists of three Base64Url-encoded parts separated by dots:

  • Part 1 — Your bot's User/Application ID encoded in Base64
  • Part 2 — A timestamp indicating when the token was generated
  • Part 3 — An HMAC cryptographic signature (this is the secret part)

This tool decodes only parts 1 and 2 — the bot ID and timestamp — which contain no sensitive information. The HMAC in part 3 is never decoded or displayed.

What to Do If Your Token Is Compromised

  1. Go to the Discord Developer Portal
  2. Select your application and navigate to the Bot tab
  3. Click Reset Token to immediately invalidate the old token
  4. Update your code and environment variables with the new token
  5. Never commit tokens to Git — use environment variables or a secrets manager