Runs offline in your browser
Encode, decode, hash and inspect
Fast, private tools for Base64, URL encoding, JWTs, hashes, UUIDs and passwords. Everything runs in your browser, so tokens and secrets are never transmitted.
● Every tool runs in your browser. Nothing you paste leaves your machine.
Why these tools should run locally
Most of what people paste into an encoder or a token decoder is a credential. A JWT is a live session. A Base64 blob out of a configuration file is usually a key. A hash being checked is often attached to something confidential.
Every tool here runs as JavaScript in your browser. There is no upload step, no API call, and no server-side processing of any kind, which you can verify by opening the network panel and watching that nothing is sent. That removes the question of whether pasting a production token into a website counts as a disclosure, because nothing is disclosed.
Built to be fast
The established tools in this category work but have accumulated a great deal of advertising, and it is normal to wait most of a second for a page to become usable. Each page here is a single request with its styles and code inlined, with no web fonts and no framework, and two ad slots placed below the tool rather than around it.
Correctness notes
Base64 handling encodes to UTF-8 first, so Unicode round-trips properly rather than throwing or corrupting. Random values come from the browser's cryptographic generator with rejection sampling rather than a biased modulo. Where a tool cannot do something safely, such as verifying a JWT signature without a key, it says so rather than pretending.