You paste a JWT into some online decoder to check a claim, and a second later it hits you: that token just went to a server you know nothing about. Is it logged? No idea.

Source: [Dev.to](https://dev.to/merrt/20-dev-tools-that-run-entirely-in-the-browser-7bi)

Sponsored