Decode locally only — signature is not verified and nothing is uploaded. Paste a full (three-part) JWT.