Is my certificate or token uploaded anywhere?

No. Everything is decoded in your browser with JavaScript and the Web Crypto API — nothing is sent to a server. This matters because these artifacts are sensitive: a JWT carries emails, roles, permissions and tenant IDs; a PKCS#12 or CSR can carry key material. Open DevTools' Network tab and you'll see no request leave the page.

Why not just use jwt.io or an SSL decoder site?

jwt.io now decodes JWTs client-side, so it doesn't upload your token — but it only handles JWTs. Most SSL/TLS certificate and SAML decoder sites still process your blob server-side, which is exactly what security teams tell you not to do with production certs and assertions full of PII. Identity Inspector decodes X.509, JWT, SAML and OIDC locally in one tool, so nothing leaves your machine for any of the four.

Can it verify a JWT signature?

Yes, for RS, ES, PS and EdDSA algorithms, by pasting the public key (SPKI PEM), an X.509 certificate, or a JWKS — public keys are safe to handle. It deliberately does not offer HS256 secret verification, because asking you to paste a server's shared secret would defeat the privacy model. For certificates it inspects validity windows and structure; it does not perform live CA/CRL/OCSP trust checks.

What can it do with SAML?

Paste a base64 SAMLRequest or SAMLResponse (redirect-binding deflate and POST-binding raw base64 both work). It inflates and pretty-prints the XML and extracts Issuer, NameID, Conditions (NotBefore/NotOnOrAfter), AudienceRestriction, AttributeStatement and SubjectConfirmation, flagging clock skew and audience mismatch. It checks structure and timestamps, not the XML signature cryptographically.

What file and token formats are supported?

Certificates as PEM or DER (.pem/.crt/.cer/.der), one or many at once; PKCS#10 CSRs; JWT/JWS compact tokens; JWKS JSON; base64 SAML; and OIDC .well-known/openid-configuration JSON. Auto-detect handles most pastes; you can also force a mode.

› Security & Privacy ›

Inspect certs, tokens & SSO — privately

History

Support

Loft Browse tools

PDF & Documents 33 Image Tools 12 Dev Tools 6 Audio and Video 8 Cooking & Kitchen 2 Security & Privacy 4 Network & Sysadmin 2 Finance Tools 1 Open Anything 8

PDF & Documents View all

Add PDF Header & Footer
Annotate PDF
Compare PDF
Compress PDF
Crop PDF
Delete PDF Pages
Deskew PDF
Extract PDF Images
Extract PDF Pages
Extract PDF Tables
Extract PDF Text
Flatten PDF
HTML to PDF
Image to PDF
Merge PDF
OCR PDF
PDF Bates Numbering
PDF Bookmarks Editor
PDF Editor
PDF Grayscale
PDF Metadata Editor
PDF N-Up
Protect PDF
Redact PDF
Reorder PDF
Repair PDF
Resize PDF
Rotate PDF
Scan to PDF
Sign PDF
Split PDF
Unlock PDF
Watermark PDF

Image Tools View all

Barcode Generator
Color Palette Extractor
Color Picker
Compress Image to Exact KB
DPI Changer
ID Photo Maker
Image Compressor
Image Format Converter
Image Metadata Editor
Image Resizer
QR Code Generator
RAW to JPG Converter

Dev Tools View all

CSV to JSON
Hash Generator
IP Subnet Calculator
Log Query Workbench
Subnet Planner
UUID Generator

Audio and Video View all

Audio Converter
Audio Tag Editor (ID3)
Compress Audio
Extract Audio from Video
Remove Audio from Video
Video Compressor
Video Converter
Video to GIF

Cooking & Kitchen View all

Canning Calculator
Sourdough Calculator

Security & Privacy View all

EVTX Explorer
File Encryption
Identity Inspector
Secure Note Sharing

Network & Sysadmin View all

PCAP Analyzer
Serial Console

Finance Tools View all

Chart Overlay Studio

Open Anything View all

3MF Viewer
DXF Viewer
Gerber Viewer
GLB / glTF Viewer
OBJ Viewer
PLY Viewer
STEP Viewer
STL Viewer

Identity Inspector Tip

Drop a folder of certs

Paste or drop multiple PEM certificates to build a chain (leaf→root, missing-intermediate flags) or an expiry dashboard sorted by days remaining.

More tools like this

Keyboard shortcuts

Open search Ctrl +K
Open search (alt) /
Close any modal / drawer Esc
Show this help ?
Move focus forward Tab
Move focus back Shift +Tab

Press ? anytime to reopen.