Paste a JWT to instantly decode its header and payload. Shows expiry status. Tokens are never sent to any server.