Paste a JSON Web Token to see the header, payload and the iat, nbf and exp times in readable form. The token is not sent anywhere.
Everything runs in your browser: nothing you enter is sent anywhere.
A JWT is three Base64 parts joined by dots: header, payload and signature. The payload is not encrypted: anyone holding the token can read it, so never put passwords or secrets in it. The server checks authenticity with the signature.