Format and validate JSON without uploading it
Formatting JSON locally means the payload is never transmitted. That matters because the JSON you are debugging is almost always a real response, complete with identifiers, email addresses and occasionally an access token.
At a glance
- Tool
- /tools/json-formatter
- Input
- JSON text, pasted or opened
- Usual source
- A copied API response or a log line
- Usual contents
- User identifiers, email addresses, internal IDs, sometimes a token
- What formatting checks
- Structure only, not meaning
- Related conversions
- To and from CSV, and to and from YAML
In detail
Nobody formats invented JSON. They format the response that just came back wrong, from staging or from production, and it is full of real records belonging to real people. Pasting that into a hosted formatter is a data transfer with no basis behind it, and if the payload happens to include a bearer token or an API key in a field, it is also a credential disclosure.
What formatting gives you is a structural verdict. If it will not parse, the usual causes are dull and specific: a truncated copy that lost its closing brackets, a trailing comma, or curly quotes picked up by copying out of a document rather than a terminal. Indented output then makes the shape of the response obvious in a way a single line never does.
Read what you have before it goes anywhere else. A formatted payload is much easier to paste into a ticket or a chat, which is how production records end up in an issue tracker that outlives the incident. Cut the payload down to the fields that demonstrate the problem and replace the identifiers before you share it.
The verification is direct: open the network panel, paste a payload, format it, and watch that no request is made. Or disconnect first, because parsing and re-printing text needs nothing but your own machine, and the tool carries on working while a hosted equivalent stops dead.
Things that catch people out
- Formatting is not validation against a schema. Well-formed JSON can still be entirely wrong for whatever consumes it.
- Very large payloads are held in your own machine's memory. Trim a huge log export before you open it rather than after.
- A token that appeared in a payload you pasted somewhere is exposed from that moment. Rotate it rather than deleting the message.
- A payload that formats cleanly can still be a truncated copy of a larger one. Check the record count against what you expected before concluding the response itself was wrong.
Try it: Hash Generator
The file hasher is on every page here because it takes any file at all and proves the point: disconnect from the network, drop a file in, and it still returns a checksum you can compare against a published one.
Hash Generator
LOCAL · Browser-OnlyGenerate MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA3-256, SHA3-512, Keccak-256, CRC32, and HMAC hashes from text or files
MD5 is cryptographically broken and should not be used for security purposes. Use SHA-256 or SHA-512 instead.
Related Working without uploading
All working without uploading →Convert CSV to JSON without uploading the file
Convert between CSV and JSON in your browser. The traps that silently change data: leading zeros, dates, delimiters, empty versus null.
Convert YAML to JSON without uploading the file
Convert YAML and JSON both ways in your browser. Infrastructure YAML is configuration, and configuration is where credentials sit.
Decode a JWT without sending it to a website
Read and verify a token in your browser. A JWT is a live credential: pasting one into a hosted decoder hands over a working session.
Open and filter a CSV without uploading it
Sort, filter and hide columns across up to 100,000 rows locally. A customer export is personal data, and opening it should not be a transfer.
Convert XML to JSON without uploading the document
Convert XML in your browser. Why attributes, namespaces and repeated elements have no single correct JSON equivalent to fall back on.
Compare two files without uploading either of them
Diff two versions of a document or a config in your browser. A hosted comparison receives both files, which doubles the exposure.
Tools for this
- JSON Formatter JSON formatter and validator online - format, beautify, and validate JSON data instantly in your browser
- JSON to CSV Converter Free online JSON to CSV converter - convert JSON arrays to CSV format for spreadsheets and databases
- Code Formatter Free online code formatter - beautify and format JavaScript, CSS, HTML, and more