Security Tools

Tokens and hashes often contain sensitive material, so these tools run entirely in your browser and never send your input anywhere.

They help you inspect and debug. They do not replace server-side verification.

• JWT Decoder

  Decode a JWT to see its header, payload and expiry time. Runs entirely in your browser, so your token is never uploaded.

• SHA-256 Generator

  Generate a SHA-256 hash from any text online. Uses your browser's built-in crypto, so your input is never uploaded.