Decode JSON Web Tokens instantly. View header, payload, and check expiration. Everything runs client-side -- your tokens never leave your browser.
Signature verification requires the secret/key and is not performed client-side.