Why I stopped pasting production JWTs into random websites (and built an offline tool suite instead)

Be honest: how many times this week have you pasted a bearer token, a customer payload, or an .env config snippet into an online formatter just to quickly see what went wrong? I used to do it constant...