Decoding happens locally in your browser — the token never leaves this page · time claims (iat / exp / nbf) are translated below the payload