What is a JWT?
A JSON Web Token has a Base64URL-encoded header, payload and signature. Decoding shows the first two sections but does not prove that a token is trusted or valid.
Security note
Never paste production secrets into third-party tools. This decoder runs locally, but you should still treat tokens as sensitive credentials.