JWT Decoder
Paste a JWT to inspect its header and payload. Decoding is not verification. Anyone can decode a JWT; trust requires validating the signature with the correct key.
Never paste production tokens that grant access to live systems into public tools.