JWT Decoder
Inspect token headers, claims and expiration without sending a token.
RUNS LOCALLY
YOUR EVERYDAY DEVELOPMENT COMPANION
Security & Authentication
A fast, free, privacy-focused collection of essential developer utilities.
Less tab switching. More building.
/
Browser-first privacy No sign-up. No friction. Always free
THE RIGHT TOOL, RIGHT HERE
Explore the toolbox 37
JWT Signature Verifier
Verify an explicitly selected algorithm and evaluate claims separately.
RUNS LOCALLY
Hash Generator
Hash text or files with SHA-256, SHA-384 and SHA-512.
RUNS LOCALLY
PKCE Code Generator
Generate a cryptographically random verifier and S256 challenge.
RUNS LOCALLY
OAuth 2.0 / OIDC Debugger
Inspect authorization URLs and callback parameters locally.
RUNS LOCALLY
JWKS Explorer
Inspect public JSON Web Key Sets and key metadata.
RUNS LOCALLY
OIDC Discovery Inspector
Explore issuer, endpoints, scopes and supported OIDC algorithms.
RUNS LOCALLY
SAML Decoder
Decode XML, Base64 POST and deflated Redirect binding messages.
RUNS LOCALLY
OAuth Scope Analyzer
Compare requested scopes with granted scopes or token claims.
RUNS LOCALLY
SCIM Filter Validator
Validate SCIM 2.0 comparison, logic and value-path filters.
RUNS LOCALLY
JWK ↔ PEM Converter
Convert RSA and EC public keys locally between JWK and SPKI PEM.
RUNS LOCALLY
Webhook Signature Verifier
Verify HMAC signatures over the exact request body.
RUNS LOCALLY
AWS IAM Policy Validator
Check policy structure and flag overly broad permissions.
RUNS LOCALLY
Passkey / WebAuthn Debugger
Inspect clientDataJSON and authenticator data without storing credentials.
RUNS LOCALLY