Skip to content
Gridlode
Rank #7,109Updated November 10, 2026

jwt.io

JSON Web Tokens - jwt.io

The site runs on Next.js, React, Auth0 and 6 other technologies. Its email security grade is B. Its SSL certificate is issued by Google Trust Services and is valid for 48 more days.

Domain age
—
Technologies
9
Email security
B
SSL days left
48

DNS records

TypeValueTTL
A104.18.32.191300
A172.64.155.65300
MXmxa-00553301.gslb.pphosted.com 103600
MXmxb-00553301.gslb.pphosted.com 103600
NScarrera.ns.cloudflare.com86400
NSjaime.ns.cloudflare.com86400
TXTgoogle-site-verification=GQkcab37IZnqQ2FOiFUhF6lnnPJNsLS3UHmpnXG8Qh4300
TXTv=spf1 -all300
AAAA2a06:98c1:3101::ac40:9b41300
AAAA2a06:98c1:310b::6812:20bf300

Technology stack

Authentication
Cookie consent
Hosting
JavaScript framework
Programming language
Security

SSL certificate

ValidValid
IssuerUS, WE1, Google Trust Services
ExpiresDecember 28, 2026
Days remaining48
ProtocolTLSv1.3
Namesjwt.io, *.jwt.io

Email security

BScore 87/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • goodSPF record found.
  • goodSPF ends with -all: servers you have not listed are rejected (hard fail).
  • goodDMARC policy is reject: mail that fails authentication is blocked.
  • goodDMARC aggregate reports are sent to mailto:[email protected].
  • goodSPF says this domain sends no email, so DKIM signing is not needed.
  • good2 MX record(s) found. Mail is handled by Proofpoint.

Homepage metadata

TitleJSON Web Tokens - jwt.io
DescriptionJSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).
Languageen
Canonicalhttps://jwt.io
Structured dataWebSite, BreadcrumbList
IndexableYes
Word count442

About jwt.io

What technology does jwt.io use?

We detected 9 technologies on jwt.io, including Auth0, Cloudflare, OneTrust, Vercel, Next.js, React.

Does jwt.io protect its email with SPF and DMARC?

jwt.io scores 87/100 (grade B) for email security. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection. No TLS-RPT record, so you won't hear about failed encrypted deliveries.

What are the name servers of jwt.io?

jwt.io uses carrera.ns.cloudflare.com, jaime.ns.cloudflare.com.