Developer Β· Security & Auth Tools
Debug APIs, clean content, format data, and run release checks directly in your browser.
Frequently used utilities for auth integration and security review: decode JWT segments, generate random tokens, compute HMAC, build Basic Auth headers, draft CSP, and compute SRI hashes for asset integrity.
Filter by Focus
JWT Decoder
Read JWT claims and time fields without signature verification
Security & Auth
HMAC Generator
Generate HMAC-SHA1, SHA256, SHA512 online
Security & Auth
Token Generator
Generate secure random tokens online
Security & Auth
CSP Generator
Generate Content Security Policy headers
Security & Auth
SRI Hash Generator
Generate SRI values from UTF-8 resource text
Security & Auth
Basic Auth Generator
Build an HTTP Basic header from UTF-8 credentials
Security & Auth
Microsoft Safe Links Decoder
Reveal the original destination wrapped by Outlook and Microsoft 365 Safe Links
Security & Auth
Basic Auth Decoder
Decode Basic credentials with an explicit UTF-8 interpretation
Security & Auth
Proofpoint URL Decoder
Reveal original destinations wrapped by Proofpoint URL Defense v2 and v3
Security & Auth
OAuth PKCE Generator
Generate RFC 7636 verifier, S256 challenge and authorization parameters
Security & Auth
AWS Presigned URL Inspector
Inspect SigV4 credential scope, signed headers and expiration without requesting the URL
Security & Auth
SAML Decoder
Decode SAML requests and responses from Base64 or HTTP-Redirect payloads
Security & Auth
X.509 Certificate Decoder
Inspect PEM or DER certificate identity, SANs, validity, usage, and fingerprint
Security & Auth
CSR Decoder
Decode PKCS#10 CSR subject, SANs, public key, signature, and fingerprints
Security & Auth
PEM to JWK Converter
Convert RSA or EC SPKI public keys between PEM and JWK with an RFC 7638 thumbprint
Security & Auth
SSH Key Fingerprint
Calculate SHA256 and legacy MD5 fingerprints from an OpenSSH public key
Security & Auth
CSP Header Analyzer
Parse an existing Content-Security-Policy and flag wildcard, unsafe, insecure, duplicate, and missing controls
Security & Auth