Is JWT Debugger safe?

Clean risk

JWT Debugger imports JWT-looking cookies and Web Storage values from the active tab into its popup debugger.

When opened, JWT Debugger injects a script into the active tab to read localStorage and sessionStorage, and it also reads cookies for that tab's URL. Values that look like JWTs are shown in the popup selector so they can be loaded into the debugger, and the extension can write edited values back to the same cookie or storage key.

JWT.iov3.2.0Firefox Add-ons
2Risk
Who publishes it

JWT.io - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
JWT.io
Website

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.2.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Store data in your browser

    storage

  • Read whatever you have copied to your clipboard

    clipboardRead

  • Write to your clipboard

    clipboardWrite

Updated 30 September 2026amo-943636