About the JWT Decoder
The JWT Decoder splits a token into header and payload and pretty-prints both as JSON — with iat/exp/nbf timestamps translated into readable dates and an expired/valid indicator. Decoding only; signatures are not verified.
No — decoding is pure Base64URL, done locally. Still, treat production tokens as secrets.
No — verification requires the secret or public key. This tool inspects contents only.