JWT Decoder
Decode and inspect JSON Web Tokens, and verify HMAC signatures.
Compute MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC-32 hashes of text or files, or an HMAC with your secret key. Files are hashed in your browser and are never uploaded.
Private by design: your input is processed on this device and never uploaded. Verify it yourself.
Yes. The file is read locally by your browser. Very large files need enough free memory, since the whole file is loaded to compute the hash.
No. MD5 and SHA-1 are broken for security purposes. Use them only for checksums and compatibility; prefer SHA-256 or better.
Decode and inspect JSON Web Tokens, and verify HMAC signatures.
Encode text to Base64 or decode it back, UTF-8 safe.
Strong random passwords and memorable passphrases, made locally.
Convert text to hexadecimal or binary and back.