Paste a JSON Web Token to see its header, claims, and expiry status. Everything happens locally in your browser — the token is never sent anywhere, unlike online decoders that receive whatever you paste.
This token uses a symmetric signature, so it can be checked with the shared secret. The secret stays in your browser.