Base64 Encoder
Convert text or files to Base64 with correct Unicode handling — entirely on this device.
71 tools in this domain
Encode, decode, hash and inspect — Base64, JWTs, certificates, SSH keys, passwords and more — locally in your browser, nothing uploaded.
Convert text or files to Base64 with correct Unicode handling — entirely on this device.
Decode Base64 to text, bytes, or a downloadable file — tolerant of the real-world mess.
Encode and decode RFC 4648 §5 URL-safe Base64 with JWT-strict padding control — entirely on this device.
Paste Base64 or a data: URI and see the image instantly — or turn an image file into copy-ready Base64 snippets, on this device.
Drop any file and stream it to Base64 with live progress — or turn Base64 back into a named, downloadable file, entirely on this device.
Pivot Base64 to hex and hex back to Base64 without a text detour — entirely on this device.
Decode and encode Base32 — RFC 4648, base32hex and Crockford, strict or tolerant — entirely on this device.
Encode and decode Base58 with the Bitcoin/IPFS alphabet — leading zeros preserved, entirely on this device.
Convert bytes to hex and back, and inspect any file in a classic offset/hex/ASCII dump — entirely on this device.
Turn binary byte groups into text and text into binary — with decimal, octal and hex views — entirely on this device.
Percent-encode and decode URLs with the encodeURIComponent vs encodeURI difference made explicit — entirely on this device.
Convert characters to HTML entities and back — named, decimal or hex — with a searchable reference table, entirely on this device.
Escape a string for the HTML element, attribute, JavaScript or URL context — OWASP output-encoding rules applied per sink, entirely on this device.
Convert xn-- domains to Unicode and back, label by label, with mixed-script flags — entirely on this device.
Escape text to \uXXXX, \u{…}, \xXX, CSS, U+ or HTML hex notation and decode any mix of them back — entirely on this device.
Escape or unescape a string literal for JSON, JavaScript, Java, C#, C, Python, SQL or POSIX shell — entirely on this device.
Rotate text through ROT13, any Caesar shift, ROT5, ROT18 or ROT47 — with an all-25-shifts panel for unknown puzzles, entirely on this device.
Apply a repeating XOR key to text, hex or Base64, or rank all 256 single-byte keys by printable ratio — entirely on this device.
Translate text to ITU Morse code and Morse back to text, with tolerant decoding and optional audio — entirely on this device.
Decompress or compress gzip, zlib and raw DEFLATE streams — pastes or files, entirely on this device.
Turn any file or text into a self-contained data: URI — MIME sniffed or chosen, Base64 or percent-encoded, entirely on this device.
Compute MD5 checksums of text, hex or Base64 bytes and files up to 64 MB — entirely on this device.
Compute the SHA-1 digest of text, hex or Base64 bytes — entirely on this device.
Compute the SHA-256 digest of text or a file — hex and Base64, entirely on this device.
Compute the SHA-512 or SHA-384 digest of text or raw bytes — hex and Base64, entirely on this device.
See the SHA-3 and Keccak digests of the same bytes side by side — including Ethereum keccak256, computed entirely on this device.
Compute CRC32, CRC16 or CRC8 with any polynomial, init, reflection and xorout — entirely on this device.
Drop a file, paste the published checksum, get a MATCH or MISMATCH verdict — multi-GB downloads verified entirely on this device.
Hash one input with 16 algorithms at once — MD5 to BLAKE3 — and see which rows match a digest you already hold, entirely on this device.
Compute HMAC-SHA-256 and family with the key and message decoded exactly as your API sees them — entirely on this device.
Paste a hash and see every algorithm it could be — prefixes parsed, parameters read, ambiguity shown honestly.
Generate bcrypt hashes at any cost factor and check a password against an existing hash — the password never leaves this device.
Hash a password with Argon2id at tunable memory, time and parallelism — or verify an existing hash, on this device.
Build .htpasswd lines for Apache or Nginx basic auth — bcrypt, APR1 or SHA-1, hashed on this device.
Generate provably unbiased, cryptographically secure passwords — on a page that stores nothing and sends nothing.
Build a memorable passphrase from the EFF long wordlist — with the exact entropy, not a colour-coded guess.
See exactly why a password scores the way it does — named rules, live entropy and an offline crack-time estimate, all on this device.
Hash a password to its SHA-1 prefix and match a Pwned Passwords range response — entirely on this device.
Generate prefixed API keys and numeric PINs by the batch — on a page that stores nothing and sends nothing.
Paste a Base32 secret and see the live RFC 6238 code, the drift window and every step of the math — on this device only.
Decode any JWT into header, payload and a plain-language claims table — expiry checked live, zero third-party code on this page.
Check a JWT's signature against your own key — HS, RS, ES, PS or EdDSA — with claim and clock-skew checks, entirely on this device.
Build a header and payload, sign with your own key, and copy the token — the key never leaves this tab.
Generate a key and get a proper JWK — alg, use and an RFC 7638 kid already stamped, with the JWKS wrapper you actually deploy.
Paste a PEM key or certificate, get a JWK with alg, use and kid stamped — and back again, entirely on this device.
Read what a certificate actually says — who it is for, when it expires, and every extension — without it leaving your device.
Decode a PKCS#10 request — subject, key, requested SANs and attributes — and see what a CA will reject, entirely on this device.
Generate an RSA, EC or Ed25519 keypair in your browser and download it as PKCS#8 and SPKI PEM.
Read any DER or BER blob as a tag, length and offset tree beside a synchronized hex view — entirely on this device.
Generate an SSH keypair on this device and copy the exact two artifacts SSH consumes: the authorized_keys line and the openssh-key-v1 file.
Encrypt or decrypt text and files with AES-GCM, CBC or CTR — the passphrase and the data never leave this device.
Encrypt a short message with an RSA public key and decrypt it with the private key — RSA-OAEP, entirely on this device.
Build a Content-Security-Policy directive by directive — with real nonce and hash sources, a Report-Only toggle and the server snippet for it.
Paste a policy and read what the browser will enforce, what it will ignore, and every weakness it leaves open — each finding with its CSP Level 3 clause.
Paste a response header block and read its security posture header by header — present, missing or weak, each verdict citing its spec.
Hash a script or stylesheet and get the integrity= attribute the browser checks — computed on this device, never uploaded.
Describe the request, paste the response headers, and see exactly which CORS check the browser fails — on this device.
Emit a complete CORS configuration for nginx, Apache, Express or Caddy — preflight, Vary: Origin and credentials handled — or read the headers you already have.
Paste a SAML blob from a browser trace and read it — both bindings auto-detected, assertion semantics extracted, entirely on this device.
Mint a PKCE code_verifier and its S256 code_challenge on this device — RFC 7636 lengths, and a verify mode for a pair you already have.
Turn any link or text into a permanent, static QR code — crisp SVG or high-resolution PNG, no signup, no expiry, entirely on this device.
Type your network name and password and get a printable WiFi QR code guests can scan to join — generated entirely on this device.
Turn contact details into a QR code that saves straight to the address book — vCard 3.0, generated entirely on this device.
Create a QR code that opens a prefilled text message — number and body set by you, generated entirely on this device.
Create a QR code that opens a prefilled email — address, subject and body set by you, generated entirely on this device.
Turn coordinates into a QR code that opens the point in any map app — geo: URI, generated entirely on this device.
Create a QR code that adds an event to the calendar — title, time and place in a standard VEVENT, generated on this device.
Drop a photo or point your camera and read any QR code — decoded on this device with open-source ZXing, never uploaded.
Pick a symbology, type your data and download a print-ready barcode — check digits computed and validated on this device.
Upload a CSV and download a ZIP of QR codes — one per row, named by your chosen column, generated entirely in your browser.
Embed your logo in a QR code with custom colors — error-correction and contrast guardrails keep it scannable, all on this device.