Paste a JSON Web Token to inspect its header and payload. Decoding happens entirely in your browser — the token is never sent anywhere.
✓ Decoded locally. This does not verify the signature.