Security & Token Tools

Working with authentication means constantly reading tokens and checking hashes. The JWT tools decode a token, list its claims and tell you when it expires; the hash tools compute every common digest of a text or file; the HMAC tool produces the signatures that webhooks and API requests are verified with.

Because these tools run entirely in your browser, tokens, secrets and passwords never leave your machine. Key and password generation uses the browser's cryptographically secure random source.

Tools in this category

Decode JWT header and payload, inspect claims and check expiration — entirely in your browser.

Security Open tool

Decode OAuth 2.0 / OpenID Connect access and ID tokens and understand scopes, audiences and lifetimes.

Security Open tool

Generate MD5 hashes of text in your browser (for checksums and legacy comparisons).

Security Open tool

Generate HMAC signatures (SHA-256/384/512/SHA-1) for webhook and API request signing.

Security Open tool

Generate strong random passwords with adjustable length and character classes, plus a strength meter.

Security Open tool

Learn more

More guides →