Tools / JWT debugger
Decode a token you paste. Nothing is sent. Unsigned and long-lived tokens are called out.