Crypto & Auth
9Decode and verify JWTs (HS256 through RS/ES/PS with JWKS lookup), generate MD5/SHA hashes and HMAC signatures, hash and check bcrypt passwords, and generate strong passwords, passphrases and UUIDs — all with the Web Crypto API in your browser.
Start here
JWT Decoder
Decode, verify (HS/RS/ES/PS, JWKS) and sign JWTs
Hash Generator
MD5, SHA-1, SHA-256/384/512, SHA-3, CRC32 and xxHash32 for text, lines and files — with verify and checksum export.
HMAC Generator & Verifier
Sign and verify HMAC-SHA256/SHA1/SHA512/MD5/SHA-3 signatures with Stripe, GitHub, Shopify, Slack and Twilio presets.
Password Generator
Strong random passwords, diceware passphrases, PINs and pronounceable codes with crack-time estimates.
All crypto & auth
JWT Debugger
Verify and sign JWTs with a secret, public key or JWKS.
UUID Generator & Inspector
Generate UUID v1/v3/v4/v5/v6/v7, ULIDs and nanoids in bulk, inspect any UUID, and validate lists.
Bcrypt Generator / Checker
Hash passwords with bcrypt, verify hashes, generate salts and benchmark cost factors on your device.
IAB TCF Consent Decoder
Decode TCF v2.2 consent strings with vendor names from the Global Vendor List, a purpose × vendor matrix and an encoder.
IAB GPP Decoder
Decode and edit Global Privacy Platform strings — US National and state sections with plain-English legends, TCF EU, gpp_sid checks.