JWT Decoder
Decode JWT header and payload, inspect all claims, and check token expiry instantly.
JSON, XML, API, regex, JWT, SQL, code formatting & debugging tools — all browser-based, no installation required.
Decode JWT header and payload, inspect all claims, and check token expiry instantly.
Advanced JWT decoder with signature verification (HS256, HS512, RS256, RS512), expiry analysis, and claims extraction. Verify token authenticity with HMAC and RSA algorithms.
Check HTTP status codes, redirect chains, and response headers for any website. Batch check up to 50 URLs. See response time, security status, and server info.
Test regular expressions live against any string. See matches, groups, and index positions.
Beautify and minify JSON instantly. Validates syntax and formats with 2 or 4-space indentation.
Convert JSON arrays to CSV format instantly. Browser-based, no upload required.
Convert CSV files into JSON format instantly. Browser-based, no upload required.
Convert JSON objects and arrays to properly structured XML. Browser-based, no upload required.
Convert XML documents to clean JSON format. Browser-based, no upload required.
Format, beautify, and validate XML online free. Pretty-print or minify XML instantly. Browser-based — no data sent to a server.
Encode text to Base64 or decode Base64 back to plain text. Instant, browser-based — no data sent to a server.
Encode and decode URL strings with percent-encoding. Instant, browser-based — no data sent to a server.
Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text or any file. Browser-based — no data sent to a server.
Send HTTP requests with Bearer, Basic Auth, or API Key authentication. Includes a headers editor, request body composer, and persistent history of your last 25 requests.
Test REST APIs directly in your browser. Send HTTP requests with custom headers and body. View status, response headers, and JSON body instantly. No signup required.
Generate cURL commands from a URL, HTTP method, headers, and request body. Supports GET, POST, PUT, PATCH, DELETE. Copy in one click.
Verify any domain's SSL certificate instantly — validity, expiry date, issuer, SANs, TLS protocol, and SHA-256 fingerprint. Supports custom ports.
Convert numbers between binary, octal, decimal, hex, and any base from 2 to 36. Supports 0b/0x/0o prefixes, nibble grouping, and exact BigInt arithmetic.
Generate RFC 4122-compliant UUID v4 (random) or UUID v1 (timestamp) identifiers. Bulk-generate up to 100 at once. No signup, browser-based.
Convert Unix timestamps to human-readable dates or any date to a Unix timestamp. Supports seconds and milliseconds. Shows UTC, ISO 8601, and local time.
...and 23 more developer tools
No. Most tools work directly in your browser without API keys. Some tools like REST API Tester may require you to provide the target API endpoint.
Yes. All processing happens locally in your browser. Your code, API requests, and data never leave your device.
Yes. These are reliable tools for testing and debugging. They use standard libraries and algorithms.