Skip to main content
SGSiteGraph

jwt.io

JSON Web Tokens - jwt.io

Last scanned Aug 2, 2026, 11:00 AM · 6 views

89

Overall score

Great

Summary

JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. This website uses Next.js behind Cloudflare CDN. SEO is good (85/100) and accessibility is excellent (100/100). Security scores good (75/100) and performance excellent (100/100). Top issue: Meta description longer than 160 characters.

JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).

Top issues to fix

7 issues found · 1 high priority

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • Meta description longer than 160 characters

    SEO

    Trim the meta description to under 160 characters to avoid truncation in search results.

  • robots.txt not found

    SEO

    Publish /robots.txt with a Sitemap: directive to guide crawlers.

  • sitemap.xml not found

    SEO

    Publish an XML sitemap and reference it from robots.txt to speed up page discovery.

+1 more issue — details in the sections below.

85

SEO

3 issue(s) found

100

Performance

361 ms

75

Security

HTTPS & header checks

100

Accessibility

0 issue(s) found

Score history

-3 overall since Jul 26, 2026

Overall
89
SEO
85
Security
75
Performance
100
Accessibility
100

Organization

Company details published in this site's own structured data.

JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).

Meta tags

Title
JSON Web Tokens - jwt.io
Description
JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).
Canonical
https://jwt.io
Language
en
Charset
utf-8
Viewport
width=device-width, initial-scale=1
Robots meta
Manifest
https://www.jwt.io/manifest.webmanifest

OpenGraph & Twitter Card

OpenGraph

og:title
JSON Web Tokens - jwt.io
og:description
JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).
og:type
website
og:url
https://jwt.io

Twitter Card

twitter:card
summary_large_image
twitter:title
JWT.IO
twitter:description
JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties.

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
CDN provider
Cloudflare
IP address
ASN

DNS records

TypeValue
A
AAAA
MX
TXT
NS
CAA
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Google Trust Services
Subject
jwt.io
Valid from
Aug 1, 2026
Valid to
Oct 30, 2026
Days until expiry
88
SAN domains
jwt.io, *.jwt.io

Security headers

  • Strict-Transport-SecurityEnabled
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: gzip · 0 cookie(s) observed

Content & assets

Headings

H1 1 · H2 0 · H3 2

Links

3 internal · 19 external · 20 broken

Images

1 total · 0 missing alt

Scripts / Styles

33 scripts · 6 stylesheets

JS / CSS size

38.7 KB · 2.5 KB

Page size

114 KB

Robots.txt & Sitemap

robots.txt
Not found
Disallow rules
0
sitemap.xml
Not found
URLs in sitemap
0

SEO issues

  • Meta description longer than 160 characters
  • robots.txt not found
  • sitemap.xml not found

Accessibility issues

No accessibility issues detected.

Scan details

Requested URL
https://jwt.io
Final URL
https://www.jwt.io/
HTTP status
200
HTTP version
HTTP/2
Response time
359 ms
HTML size
114 KB
Redirect chain
https://jwt.io → https://www.jwt.io/

See something wrong on this report? Request a correction

Frequently asked questions

What technology does jwt.io use?
jwt.io is built with Next.js.
Is jwt.io secure (HTTPS)?
Yes. jwt.io uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 30, 2026.
Who hosts jwt.io?
Hosting provider information for jwt.io is not available yet.
What is jwt.io's SEO score?
jwt.io scored 85/100 for SEO in the latest analysis (great).
What is jwt.io's overall website score?
jwt.io has an overall SiteGraph score of 89/100, combining SEO, performance, security, and accessibility.
Has jwt.io's score changed over time?
jwt.io's overall score has declined by 3 points (from 92 to 89) since Jul 26, 2026.