Paste a JWT to decode its header and payload. Checks expiration automatically. Nothing leaves your browser.