Decode and inspect JWT tokens. View header, payload, and expiry. Entirely client-side — nothing is sent to a server.