JKS Viewer | Java Keystore Viewer Online

JKS viewer for Java keystores: list every alias, certificate chain, expiry date and SHA-1 or SHA-256 fingerprint in JKS, JCEKS and PKCS12. No keytool needed.

Also known as: jks viewer · java keystore viewer · keystore viewer online · jks file viewer online · keytool list online · get sha1 from keystore · android keystore sha1 fingerprint · extract private key from jks · jks to pem · jceks viewer

ssl and security tools

encryption tools

viewers

Keystore Input

Store password

Key password (only if different)

Read in this tab with no keytool, no Java and no upload. Passwords and keys are never saved.

Keystore Contents

Every alias in the keystore will appear here with its entry type, creation date, certificate chain, expiry status and SHA-1 and SHA-256 fingerprints.

About JKS Viewer

A JKS viewer shows what is inside a Java keystore without running keytool: every alias, its entry type and creation date, the full certificate chain, expiry dates and the SHA-1 and SHA-256 fingerprints Firebase and Google Cloud ask for. It reads JKS, JCEKS and PKCS12 keystores, checks the store password, and with the right password exports a private key as PEM or a .p12 file.

Key Features

Reads JKS, JCEKS and PKCS12 keystores, and tells you which one a .jks or .keystore file really is (keytool has created PKCS12 by default since Java 9)
Lists private key, trusted certificate and secret key entries with the same owner, issuer, serial and fingerprint values keytool -list -v prints
Verifies the store password against the file's integrity digest or MAC, and lists JKS entries even when you do not know the password
Flags expired certificates and anything expiring within 30 days, with the soonest expiry shown at the top
Recovers private keys, including entries with their own key password, and exports them as PEM or a password-protected .p12
Shows the base64 SHA-1 key hash that Meta's Android SDK asks for, next to each certificate's fingerprints

Use Cases

Getting the SHA-1 and SHA-256 fingerprints of an Android upload key or debug.keystore for Firebase or Google Sign-In
Checking which certificate in a Tomcat or Spring Boot keystore expires next before a renewal window
Decoding a base64 keystore stored as a GitHub Actions secret to confirm it holds the right alias
Pulling the private key and chain out of a JKS for an nginx or AWS load balancer migration
Auditing a Java truststore such as cacerts for expired or unexpected root CAs

Supported Formats

JKS (.jks, .keystore)

JCEKS (.jceks)

PKCS12 (.p12, .pfx)

Base64-encoded keystores

Java cacerts truststores

Related Keywords

jks viewer

java keystore viewer

keystore viewer online

jks file viewer online

keytool list online

get sha1 from keystore

android keystore sha1 fingerprint

extract private key from jks

jks to pem

jceks viewer

How do I get the SHA-1 fingerprint from an Android keystore?

With a JDK installed, run keytool -list -v -keystore ~/.android/debug.keystore -alias androiddebugkey -storepass android -keypass android; the debug keystore's password is always android. Without Java, drop the keystore here: each certificate shows its SHA-1 and SHA-256 fingerprints, ready to paste into the Firebase console or a Google Cloud OAuth client. If the app uses Play App Signing, the key users install is signed by Google, so also add the app signing certificate's SHA-1 from Play Console under Test and release, App integrity.

Your keystore never leaves this tab

The file is parsed and decrypted in your browser with the Web Crypto API. Nothing is uploaded, and only the text report is kept by auto-save: never the keystore, a password or a private key.

Liked this tool?

DevToolLab is free to use. If this viewer saved you some time today, please consider supporting our work.

Buy us a coffee ☕

Frequently asked questions

What is JKS Viewer used for?

JKS viewer for Java keystores: list every alias, certificate chain, expiry date and SHA-1 or SHA-256 fingerprint in JKS, JCEKS and PKCS12. No keytool needed.

Is JKS Viewer free to use?

Yes. JKS Viewer is completely free with no usage limits, and there is no paid tier required to use it.

Do I need an account to use JKS Viewer?

No. JKS Viewer works immediately in your browser with no signup, login, or email address required.

Related Tools

JSON Viewer Online | Explore JSON Tree Structure Free

View and explore JSON data in an interactive collapsible tree structure. Search, filter, and navigate nested objects and arrays. Free online JSON viewer with no signup required.

json tools

viewers

Swagger Viewer Online | Free OpenAPI Viewer

Swagger viewer and OpenAPI explorer online. Load a spec from a URL or paste JSON/YAML, browse endpoints and schemas, and send live test calls. Free.

json tools

api and http tools

CSV Viewer Online | CSV File Reader

CSV viewer online: open a CSV from a URL, upload a file, or paste data, then search, sort, and filter it in a clean table. Shareable ?url= links, custom delimiters, large files.

csv and spreadsheet tools

url and link tools

More Tools You Might Like

Pastebin Online | Share Code & Text Snippets Free

Popular

Share code snippets, logs, and text with a shareable link. Syntax highlighting for 30+ languages, expiration controls, and password protection for Pro users.

text tools

password and key generators

math calculators

utilities

Use Tool

URL Tracker & Link Shortener | Track Clicks

Popular

Create short, trackable URLs with detailed click analytics. Track visitor location, devices, referrers, and more. Password protection & QR codes included.

text tools

password and key generators

url and link tools

networking

Use Tool

Webhook Receiver & Inspector | Test HTTP Webhooks

Popular

Generate a unique URL to easily test, receive and inspect HTTP webhooks in real-time. View request headers, query parameters, JSON payloads, and more.