Paste a JSON Web Token to decode its header and payload, read every claim in plain language, check whether it's expired, and verify an HS256 signature against a secret. Decoding & verification happen entirely in your browser.