You can put all the dev and staging JWTs you want in to jwt.io at no risk if those things aren’t available to the outside world . Agreed. This pretty much applies with any data & tool. If the data is extra sensitive, make extra sure the tool you are using is secure.2 Eyl 2020