Free tools

Encode and decode Base64

Both directions, with UTF-8 handled properly, so text that is not plain ASCII survives the round trip.

In your browser nothing you paste is uploaded
Output 

  

  




    

      
This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

      
      Free scan
      
    


    

      More tools
      

        
        
          JWT debugger
          Decode a token and catch alg:none, a missing expiry, and secrets in the payload.
        
        
        
          Secret scanner
          Paste a .env file or a diff and find the keys that should not be in it.
        
        
        
          CSP evaluator
          Grade a Content-Security-Policy and see which directive undoes it.
        
        
        
          SRI hash generator
          Generate the integrity attribute for a script or stylesheet you load from a CDN.
        
        
        
          Hash generator
          MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of any text, at once.