Decode any JSON Web Token: inspect header, payload, claims, and expiry. Runs entirely in your browser, your token never leaves.