Encoding & Security

Encoding and security tools cover the spectrum from simple data encoding (Base64, URL encoding) to cryptographic operations (SHA-256, MD5, HMAC) and authentication tokens (JWT). Understanding these tools is essential for building secure, robust applications that handle data safely across different systems and networks.

Why Use These Tools?

Security is not optional in modern development. Understanding how encoding differs from encryption, when to use which hashing algorithm, and how to properly handle JWT tokens are critical skills. These tools let you experiment with and verify encoding/hashing operations without writing throwaway scripts.

All encoding & security on Devkitr are completely free and run 100% in your browser. Your data never leaves your device — there are no server-side requests, no data logging, and no sign-up required.

Best Practices

• Never use MD5 or SHA-1 for security-critical hashing — use SHA-256 or bcrypt for passwords
• Always verify JWT token expiration before trusting its claims in your application
• Use Base64 encoding for binary data transport, not for security or encryption
• Generate cryptographically secure random values for tokens, session IDs, and passwords

Privacy & Security

Every tool in this category processes your data entirely in your browser using JavaScript. We never transmit, store, or log any data you input. You can verify this by opening your browser's Developer Tools and monitoring the Network tab while using any tool — you'll see zero data requests related to your input.

Available Tools

• Base64 Encoder/Decoder – Encode text to Base64 or decode Base64 strings back to readable text.
• JWT Decoder – Decode and inspect JSON Web Tokens to view header, payload, and signature.
• SHA256 Generator – Generate SHA-256 hash digests from text input for checksums and verification.
• MD5 Generator – Generate MD5 hash digests from text for checksums and quick comparisons.
• HMAC Generator – Generate HMAC-SHA256, HMAC-SHA512 digests online with a secret key.
• JWT Generator / Signer – Create and sign JSON Web Tokens with custom claims, headers, and HS256/RS256 algorithms.
• Bcrypt Hash Generator – Generate and verify bcrypt password hashes with configurable salt rounds.
• RSA Key Pair Generator – Generate RSA public/private key pairs in PEM format for encryption and signing.
• SSL Certificate Decoder – Decode and check SSL certificates, CSR, and PEM files online — view issuer, expiry, SANs, chain info, and validate certificate details instantly.
• TOTP / 2FA Generator – Free online 2FA code generator and authenticator tool — generate TOTP secrets, 2FA codes, and test two-factor authentication instantly.
• CSP Header Generator – Generate, evaluate, and test Content-Security-Policy (CSP) headers with a visual security headers builder and checker.
• SRI Hash Generator – Generate Subresource Integrity hashes for CDN script and link tags.
• Password Strength Checker – Check password strength with entropy calculation, crack time estimate, and improvement suggestions.
• PKCE Generator – Generate OAuth 2.0 PKCE code verifier and SHA-256 code challenge for secure authorization flows.