Your data never leaves your browser — everything runs client-side.
Signature is not verified. This tool only decodes the header and payload — it does not check cryptographic authenticity.
