Paste a JWT (or Bearer token). Decoding only — signature is not verified without a secret.
Never paste production secrets into untrusted tools. This decoder runs fully in your browser.