A JSON Web Token often looks like opaque security data, but its header and payload are normally readable Base64URL segments. That makes local inspection straightforward. It also creates two common mistakes: Uploading a live bearer token to an unknown server-side decoder.

Source: [Dev.to](https://dev.to/tanya_monoware/how-to-inspect-a-jwt-without-uploading-a-production-token-4co6)

Sponsored