Paste a JSON Web Token to inspect its header and payload.
This tool decodes only — it does not verify the signature, so never trust a token based on this output alone. Nothing is sent anywhere.