DeskTray

JWT Decoder

Inspect JSON Web Tokens from your app or API. The token is decoded in your browser, so it is safe to paste real tokens.

Runs in your browser. Nothing is uploaded Free, no sign-up Works on mobile
JWT token
Valid until 14/10/2027, 5:46:40 pm (523363 minutes left).
Header
{
  "alg": "HS256",
  "typ": "JWT"
}
Payload
{
  "sub": "1234567890",
  "name": "Ravi Kumar",
  "role": "admin",
  "iat": 1792000000,
  "exp": 1823536000
}
ClaimMeaningValue
subSubject1234567890
nameNameRavi Kumar
roleRoleadmin
iatIssued at14/10/2026, 5:46:40 pm (1792000000)
expExpires14/10/2027, 5:46:40 pm (1823536000)

Algorithm: HS256. The signature is not verified here because that needs the secret or public key. Decoding happens in your browser, so the token is never sent anywhere.

How to use JWT Decoder

  1. Paste the JWT (with or without “Bearer”).
  2. Read the header, payload and claims.
  3. Check the expiry status.

Frequently asked questions

Does this verify the signature?

No. Verifying needs the secret or public key. This tool only decodes the readable parts.

Are JWTs encrypted?

Normal JWTs (JWS) are only signed and encoded, so anyone can read the payload. Never put passwords or sensitive data in them.

Is my data sent to a server?

No. Everything runs in your browser, so API keys, tokens, configs and customer data never leave your machine.

Related tools

All Developer Tools →