JWT Explained

A JWT has three parts: header, payload, signature — base64url encoded.

Decoding

Use JWT Decoder in the browser to inspect claims. Never treat decoded payloads as trusted without verifying the signature on the server.

Summary

JWTs are convenient for APIs; decoding is educational, not authorization.