Decode JWT header and payload locally. Decoding is not verification.

# runs entirely in your browser — nothing is uploaded

# decoding ≠ verification — the signature is NOT checked

token

# paste a token to decode it

$ cd ..