Security & Tokens Tools — JWKS, Verify, Certificates, Secrets
Six browser-local utilities: inspect JWK/JWKS, verify JWT signatures against pasted JWKS, decode PEM X.509 certificates, scan secrets, hash/verify bcrypt, and convert public PEM ↔ JWK. No remote JWKS fetch, not a trust store. Also useful: jwt-decode, jwt-encode, validate-env, and password-generator.
- Inspect JWKS and verify JWT signatures against pasted keys.
- Decode PEM certificates and convert public PEM ↔ JWK.
- Scan pasted text and hash/verify bcrypt locally.
Scan secrets
Scan pasted text for secret-like patterns — documented subset, not gitleaks.
JWT Verify
Live JWT verify — 14 signing algs, JWKS/PEM/HMAC, aud/iss/exp — no URL fetch.
Inspect JWKS
Inspect JWK/JWKS with private fields redacted — paste-only, no remote fetch.
PEM ↔ JWK
Convert public PEM (SPKI) ↔ JWK JSON — private input redacted.
Decode certificate
Decode PEM X.509 certificates: subject, SANs, expiry, fingerprint — not a trust store.
Bcrypt Hash
Hash or verify passwords with bcrypt (cost 4–14) in the browser — not production auth.
Guides
JWT Encode/Decode: Build and Inspect a Token Online
Decode a JWT header and payload, or sign a test token, right in your browser: HS256, RS256, ES256, with no secret sent to a third-party server.
Secure Password Generator Online: 2026 Best Practices
Length, entropy, symbols: generate a strong password in your browser with Web Crypto, no network transit, and know what the tool does not guarantee.
Optimize REST API Performance with JSON Minification
Speed up your REST APIs by optimizing JSON payloads. Minification, compression, pagination and best practices for ultra-fast APIs.
PHP Serialization Guide — serialize, unserialize & Security
Learn PHP serialize() and unserialize() with examples: arrays, objects, WordPress meta, JSON conversion. Security pitfalls and when to choose JSON instead.
Online Minifiers vs Build Tools: When to Use Each
Understand the differences between online minifiers and build tools. Learn when to use each approach to optimize your development workflow.