Encode / Decode
Base64, Base64URL, URL, HTML entities, hex and Unicode escapes.
Decode JWTs, explain the claims, check expiry and verify HMAC signatures locally.
Runs entirely in your browser. Nothing you type or paste is sent anywhere.
Base64, Base64URL, URL, HTML entities, hex and Unicode escapes.
MD5, SHA-1, SHA-256, SHA-384, SHA-512 and HMAC for text or files.
Generate UUID v4/v7, ULIDs and nano IDs in bulk; decode the timestamp inside v7 and ULID.
Strong passwords and passphrases from the browser’s secure random source, with entropy.
Paste a token on the left, or load the sample, to see its header, payload and claims.