Inspect the header, payload and expiry of a JSON Web Token. Nothing is sent anywhere — decoding happens locally.
This tool decodes tokens only. It never verifies signatures — a decoded JWT is not proof of authenticity, so never trust unverified payloads.