Decode a JSON Web Token's header and payload.
See it in action
Decodes the header and payload only — the signature isn't verified, since that requires the issuer's secret or public key. Runs entirely in your browser.