Skip to content
Reembun
Developer

A JSON formatter that never stores or shares what you paste

Format, validate and minify JSON in your browser, with no save button, no share link and no server, so a pasted token or config can never end up on a public URL.

Ready. Runs locally on your device.

Your files stay on your device. The tool works directly in your browser, using your device to process your files. Nothing is sent to our servers, and we never receive, store, or see your files or figures.

Share

Share this page

Share result

Your results

Use the tool above first. Whatever it works out shows up here, ready to copy or share.

Cite

Cite this page

Reembun. (2026, September 11). A JSON formatter that never stores or shares what you paste. https://reembun.com/jsonformatter-alternative
Pick a style, then copy the reference. The access date is today.

How to use it

  1. Paste the JSON

    It is parsed in this tab as you paste. Nothing is sent, saved or given a link.

  2. Format or minify

    Pick an indent of two spaces, four spaces or a tab, or minify it to one line. Sorting keys makes two documents easy to compare.

  3. Fix any error

    A syntax error is reported with its exact line and column, so you can jump straight to it.

  4. Copy or download

    Copy the result, or save it as a file straight from your browser.

The formatters were not hacked. They worked as designed. Both offered a way to save a formatted snippet and get a link to share it, and those links followed a predictable pattern. According to watchTowr’s research, reported in November 2025 by BleepingComputer and Help Net Security, anyone could walk through those links and read what people had saved.

What people had saved was exactly what developers paste into a formatter: API responses, configuration files, deployment settings. Among more than 80,000 snippets were Active Directory credentials, cloud access keys, private keys, CI/CD secrets and personal information, from organisations across government, finance, healthcare, telecoms and security. The researchers also planted fake keys and found that others were scraping the same links and trying the keys within days.

The lesson is not that these two sites were uniquely careless. It is that any tool which stores what you paste creates a copy you no longer control, and a feature designed for convenience can turn that copy public.

Why this one cannot do the same

This formatterFormatters with save and share
Where the JSON is processedYour browserOften a server
Save or share linksNoneYes, stored on the site
Copy left behindNoneUntil deleted, if ever
Works offlineYes, after first loadDepends

This is a structural difference, not a promise. There is no save feature to misconfigure because there is no storage to save into. Formatting, validation and minifying are all done by your browser’s own JSON parser, and the result goes to your clipboard or to a file on your own device.

The same care for tokens

JSON is not the only thing developers paste into web tools. A JWT often carries a user’s identity and permissions, and pasting a live one into a decoder that logs it is the same mistake in a different shape. The JWT decoder here reads the token in your browser too, and deliberately offers no way to share its output. Base64, URL encoding and hash generation work the same way.

Good habits, whatever tool you use

  • Strip secrets before pasting. Replace passwords, keys and tokens with placeholders. The structure is what you need formatted, not the values.
  • Rotate anything already pasted. If a live secret has gone into a site that stores snippets, assume it is exposed and change it.
  • Prefer tools you can verify. A tool that works with your connection switched off is not sending your data anywhere.
  • Keep formatting local where you can. Most code editors format JSON with a keystroke, and this page is there for when they are not to hand.

Common questions

What happened with JSONFormatter and CodeBeautify?

In November 2025, the security firm watchTowr published research showing that the save and share feature on both sites had exposed more than 80,000 pasted snippets through predictable, browsable links, covering five years of JSONFormatter and one year of CodeBeautify. The snippets included passwords, cloud keys, private keys and personal data from organisations in government, banking, healthcare and other sectors. Both sites disabled saving after the research was published.

Is this JSONFormatter or CodeBeautify?

No, and it has no connection to either. Both names belong to their owners. This is a separate formatter that runs entirely in your browser.

How can I be sure this one does not store what I paste?

There is nothing to store it with. The page has no save button, no share link and no server behind the formatter: the JSON is parsed and printed by your browser. You can confirm it by opening the Network tab in your browser's developer tools while you paste. No request is made.

Is it safe to paste production secrets here, then?

Safer than on a site that can save them, but the best habit is still not to paste live credentials into any web page. Replace tokens and passwords with placeholders before formatting, or rotate any secret you have pasted somewhere you cannot vouch for.

About Reembun

Reembun is a free collection of more than 100 online tools for PDFs, images, video, audio, text and everyday calculations. Every tool runs inside your browser, so your files are processed by your own device and are never uploaded to a server. There is nothing to install, no account to create, and no watermark on what you make.

You do not have to take our word for it. Open your browser’s developer tools, watch the Network tab, and use any tool: your file never appears there.

Reembun is built and run by PT RHP Cipta Digital, a registered company in Indonesia.

Last reviewed