Encode, decode, hash, inspect tokens, and work with certificate and key material locally.
19 tools
Topic cluster
Encode, decode, hash, inspect tokens, and work with certificate and key material locally.
Decode JSON Web Tokens instantly. Never sends your token to any server.
Verify JWT signatures (HMAC) and validate claims — all client-side.
Encode, decode, and verify JWT tokens in one local-first workspace.
Decode PEM-encoded X.509 certificates and inspect all details locally.
Avoid common JWT handling mistakes when reviewing decoded or verified tokens.
Understand certificate chain fields before debugging key and token verification.
Choose hash algorithms deliberately when reviewing evidence or compatibility.
Use this hub for encoded payloads, hashes, token material, certificates, and verification tasks.
Avoid common JWT handling mistakes when reviewing decoded or verified tokens.
Understand certificate chain fields before debugging key and token verification.
Choose hash algorithms deliberately when reviewing evidence or compatibility.
No. Decoding makes data readable. Verification proves the expected key and algorithm signed it.
Yes. Treat Base64, JWT, URL, and certificate text as sensitive until you understand what it contains.
Encode or decode HTML entities instantly in your browser.
Encode text to Base64 format or decode it back to a readable string.
Encode and decode Base32 and Base58 text locally without uploading data.
Encode text for safe URL transmission or decode it back to readable string.
Decode JSON Web Tokens instantly. Never sends your token to any server.
Encode, decode, and verify JWT tokens in one local-first workspace.
Instantly generate MD5, SHA-1, SHA-256, and SHA-512 hashes from text.
Generate an MD5 hash quickly with a focused single-algorithm workflow.
Convert images to Base64 data URIs and back.
Decode PEM-encoded X.509 certificates and inspect all details locally.
Verify JWT signatures (HMAC) and validate claims — all client-side.
Parse Content Security Policy headers and analyze for security issues.
Analyze security headers with pass/warn/fail scoring and remediation guidance.
Generate time-based or counter-based one-time passwords for 2FA.
Gzip/Deflate compression lab with browser-dependent Brotli support for HTTP debugging, size checks, and Base64 transfer.
Decode SAML requests and responses locally, inspect assertions, attributes, audiences, recipients, and signature material without validating trust.
Parse DER, PEM, Base64, or hex encoded ASN.1 data locally and inspect TLV structure, tag names, lengths, OIDs, strings, and nested containers.
Inspect text, hex, and Base64 as bytes locally with UTF-8 text, grouped hex, Base64, binary rows, offsets, and byte statistics.
Convert public PEM/SPKI keys and JWKs locally, inspect key metadata, and compute RFC 7638 thumbprints without uploading key material.
