This tool decodes and inspects a JWT locally in your browser only. It never verifies the signature and never asks for (or accepts) a secret or public key — nothing is sent anywhere.