Decode a JSON Web Token's header and payload. In-browser only — your token is never transmitted.
—
Decode only — this does not verify the signature. Never trust a token's contents without verifying its signature against the issuer's key.