JWT Decoded Shows "signature invalid" / Verification Failed — Is That Normal?

JWT decoded but shows signature invalid or verification failed? Learn the difference between decode and verify, why it fails, and when you should just read the payload vs. actually verify.