Encode and decode data
Almost everything that travels between a browser and a server has been transformed on the way: a parameter with spaces is escaped as %20, a small image is embedded as Base64 in a data URI, a session token is a JWT made of three dot-separated parts. These five tools peel those layers off so you can read what is underneath, or apply them when you are the one sending the data.
The JWT decoder shows the header, the payload and whether the token has expired, with dates in your local time; it is the first thing to check when an API answers 401. The hash generator computes MD5, SHA-1 and SHA-256 for text or a file and compares the result with the value you were given, which is handy for verifying a download. Nothing is sent to a server, because a production token should never end up in a site that keeps it.
All 5 tools
- Base64 encode and decodeEncode and decode Base64 as you type, with automatic detection and a URL-safe variant. Turn files into data URIs and Base64 back into files.
- URL encode and decodeEncode and decode URLs as you type (encodeURIComponent or encodeURI) and break any URL down: host, port, path, hash and query params.
- HTML entities encoder and decoderTurn < > & " and ' into HTML entities, or everything non-ASCII, and decode &, é or 😀 as you type, right in your browser.
- JWT decoderPaste a JWT to see its header, its payload and whether it is valid, expired or not yet valid, with dates in your local time. It never leaves your browser.
- Hash generatorCompute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of text or a file as you type, and compare against an expected hash to see if it matches.