// encoding
Encoding, Hashing & Security
Encode and decode Base64 and URLs, generate MD5 and SHA hashes, and inspect JWTs without sending a single byte to a server. These are the everyday encoding, hashing and token tools you reach for while debugging APIs and auth — all client-side and free.
No upload, ever No account needed Works offline
// 6 tools
Encoding, Hashing & Security
Password Generator Generate strong random passwords or memorable passphrases, with a strength estimate. Base64 Encode / Decode Hot Encode and decode Base64 for text and files, with charset, line-by-line, MIME and URL-safe options. URL Encode / Decode Percent-encode and decode URLs and query string components safely. JWT Decoder & Encoder Hot Decode, verify and generate JSON Web Tokens: claims breakdown, signature check and signing, entirely client-side. Hash Generator Popular Generate MD5, SHA-1, SHA-2, SHA-3, Keccak-256 and CRC32 hashes or HMACs of text or files, and check a known value. UUID / GUID Generator Generate UUID v4 and v7, ULID or NanoID, singly or in bulk, ready to copy.
// guides
Guides for encoding, hashing & security
How to Create and Sign a JWT Build a JSON Web Token step by step: pick an algorithm, write the header and claims, sign with a secret or private key, and verify the result. JWT Decoder & Encoder Base64 Is Not Encryption: Encoding vs Security Base64 looks scrambled, so people treat it as a way to hide data. It isn't. Here's why Base64 offers zero security, and what to use when you actually need secrecy. Base64 Encode / Decode Character Encoding: ASCII, Unicode & UTF-8 Explained Why text is bytes, how ASCII, Unicode, and UTF-8 relate, and what causes those mojibake question-mark characters — explained for developers. URL Encode / Decode Encoding vs Encryption vs Hashing: A Developer's Guide The three are constantly confused. This guide explains what encoding, encryption, and hashing each do, when to use which, and the mistakes that cause real security bugs. Base64 Encode / Decode How JWT Authentication Works How JSON Web Tokens are used for stateless authentication — the header/payload/signature structure, how verification works, and the security caveats. JWT Decoder & Encoder How to Store Passwords Securely Why you hash (not encrypt) passwords, what salting does, which slow algorithms to use (bcrypt, scrypt, Argon2), and the mistakes that cause breaches. Password Generator Web Security Essentials for Developers The security fundamentals every developer needs — authentication and tokens, storing passwords safely, transport security, and where encoding fits — with focused deep-dives. JWT Decoder & Encoder How to Generate a Strong Password What actually makes a password strong — length, character variety, and entropy — and why a generator beats picking one yourself. Password Generator How to Decode a JWT (JSON Web Token) What a JWT is made of, how to decode its header and payload, and the crucial difference between decoding a token and verifying it. JWT Decoder & Encoder MD5, SHA-1 & SHA-256: Hashing Explained What a hash function is, how MD5, SHA-1, SHA-256, SHA-512 and SHA-3 differ, what HMAC and CRC32 are for, and why hashing is not encryption. Hash Generator URL Encoding Explained: When and How to Percent-Encode What URL (percent) encoding is, which characters need it, the space and plus-sign gotcha, and when to encode. URL Encode / Decode What Is a UUID? Versions, Uses, and How to Generate One UUIDs and GUIDs explained — what they are, why v4 is the common choice, how unique they really are, and when to use them. UUID / GUID Generator What Is Base64 Encoding? A Simple Explanation Base64 explained in plain English — what it is, why developers use it, how it works, and when you should not use it. Base64 Encode / Decode
// keep exploring
Other tool categories
Need something else?
36+ browser-based utilities — all free, all private, nothing to install.