· encryption
Decode a JWT in your browser to read its header, claims and signature. Nothing is verified, so use it to inspect a token, not to trust one.
Encryption
A hash turns any input into a short, fixed-length fingerprint. The same input always gives the same digest, and changing a single byte gives a different one. That makes hashes the standard way to check a download, compare two files or store a password without keeping the password itself.
This category covers the SHA-2 and SHA-3 families, BLAKE2 and BLAKE3, Keccak and SHAKE, and the legacy MD4, MD5 and SHA-1 for older systems that still expect them. For error detection there are CRC-32, CRC-64, Adler-32 and FNV checksums. Keyed and password hashing come with matching verifiers: HMAC, and Argon2id. ROT13 and ROT47 sit here too, as simple letter rotation ciphers.
For accounts and logins there is a random password generator, a TOTP 2FA code generator that computes the current code from a secret, and a JWT decoder for reading the header and claims of a token.
Tools marked Runs in your browser work on your own device.
1 public tool