JWT Decoder

Decode a JSON Web Token's header and payload, read expiry/issued-at claims, and verify HS256 signatures — all in your browser, the token never leaves your machine.