Runs offline in your browser

Encode, decode, hash and inspect

Fast, private tools for Base64, URL encoding, JWTs, hashes, UUIDs and passwords. Everything runs in your browser, so tokens and secrets are never transmitted.

Every tool runs in your browser. Nothing you paste leaves your machine.

Why these tools should run locally

Most of what people paste into an encoder or a token decoder is a credential. A JWT is a live session. A Base64 blob out of a configuration file is usually a key. A hash being checked is often attached to something confidential.

Every tool here runs as JavaScript in your browser. There is no upload step, no API call, and no server-side processing of any kind, which you can verify by opening the network panel and watching that nothing is sent. That removes the question of whether pasting a production token into a website counts as a disclosure, because nothing is disclosed.

Built to be fast

The established tools in this category work but have accumulated a great deal of advertising, and it is normal to wait most of a second for a page to become usable. Each page here is a single request with its styles and code inlined, with no web fonts and no framework, and two ad slots placed below the tool rather than around it.

Correctness notes

Base64 handling encodes to UTF-8 first, so Unicode round-trips properly rather than throwing or corrupting. Random values come from the browser's cryptographic generator with rejection sampling rather than a biased modulo. Where a tool cannot do something safely, such as verifying a JWT signature without a key, it says so rather than pretending.