Signature cannot be verified client-side — displayed as raw base64url. Verification requires secret / public key on server. ALG none → no signature, token is unsigned.
WHY THIS BEATS jwt.io / jwt.ms / token.dev:
• No tracking, no server, no localStorage — 100% client side, sticky privacy proof
• Input highlights header (white) / payload (gray) / signature (dim) live as you type — jwt.io doesn't
• Plain-English claim explanations BELOW value + live VALID/EXPIRED badges with countdown — jwt.ms hides in tooltips
• Full UI red-tint on expired — unmissable, vs tiny red text elsewhere
• Terminal aesthetic, single HTML file, 20KB, instant load — vs heavy React apps
• Bearer prefix auto-strip, drag & drop, URL hash share, timeline visualization, raw+JSON copy — competitors miss several
• Zero animations except cursor blink, #0a0a0a true black, JetBrains Mono, thin lines only
🔒 Decoded entirely in your browser. Nothing is sent anywhere.