Encoder / decoder
Eight developer and administrator tools in one page: Base64, URL, hexadecimal and HTML encoding and decoding, JWT reading, MD5 and SHA hashes of text or files, timestamp conversion and UUID generation.
Texts, files and tokens are never sent.
What the tool does
Common encodings
Base64 (standard and URL-safe, UTF-8 safe), URL encoding with parameter breakdown, hexadecimal and HTML entities.
JWT reader
Decodes the header and payload, shows the exp, nbf and iat dates, flags an expired or unsigned token, without ever verifying or transmitting the signature.
Text and file hashes
MD5, SHA-1, SHA-256, SHA-384 and SHA-512, with comparison to the expected hash to check a download.
Timestamps and UUIDs
Detects seconds, milliseconds, microseconds or nanoseconds, converts to ISO, UTC and local time; generates v4 and v7 UUIDs and inspects the ones you give it.
How to use it
Pick the tool tab, paste the text or token, or drop a file for a hash: the result is instant and copies in one click.
FAQ
Is decoding a JWT the same as validating it?
No. A JWT can be read freely (its parts are Base64URL JSON); only verifying its signature with the key proves it is authentic. This tool only reads it.
Why will my Base64 not decode?
It may contain foreign characters, or an impossible length (a remainder of 1 character). Line breaks and missing "=" are tolerated; mixing "+ /" and "- _" is not.
How do I verify a downloaded file?
Compute its SHA-256 in the Hashes tab and paste the hash published by the vendor into the comparison field: the tool says whether they are identical.
Privacy
Texts, files and tokens are never sent.