JWT Decoder
Read a token's payload without sending it anywhere. Decoding is not verifying - this shows what a token says, not whether its signature is genuine.
Signature verification needs the issuer's secret or public key and always happens server-side. Anyone can decode a JWT - never put secrets inside one.
People also use
Need a tool like this inside your own product? That is what STUDIO builds.