Features
- Header and payload pretty-printed.
- iat, nbf and exp shown as dates, with an EXPIRED warning.
- The signature is not verified (that needs the secret).
Private by design
Everything runs in your browser. Nothing you paste is uploaded, logged or stored - safe for API responses, tokens and customer data.
Questions
Is it safe to paste a production token?
The token is decoded in your browser only. Still, treat tokens like passwords and avoid pasting them into tools you do not trust.