All tokens are decoded locally on this page. You should always be critical about where you paste your JWTs, since they can grant access to protected resources. You can always decode and inspect your JWTs locally on your own machine. See the snippets page for code snippets on how to decode a token on your own computer.