Question 1

Does it verify the signature?

Accepted Answer

No — it only decodes. Verifying a signature requires the secret, which should never be typed into a browser. Verification belongs on the server.

Question 2

Is it safe to paste my token here?

Accepted Answer

Decoding happens entirely in your browser and the token is never transmitted. Still, if you paste a live session token, remember it can leak through screen sharing or history — signing out afterwards is a good habit.

JWT Decoder