Encoder & Hash Tool

Base64, URL encoding/decoding, and cryptographic hashing — all client-side, nothing sent to servers

Convert text to and from Base64 and URL encoding, or generate cryptographic hashes of any input. All processing happens in your browser, so the data you paste is never uploaded to a server. More free security tools.

Base64

URL Encode

HTML Entities

Hash (SHA)

Hex / Binary

JWT Encode

Plain Text / Input

Base64 Output

URL-safe Base64

URL-safe variant will appear here…

Input

URL Encoded

URL Decoded

encodeURIComponent (strict)

Plain Text / HTML

HTML Entities Encoded

Decoded (Entities → Text)

Uses the Web Crypto API — fully client-side, no data leaves your browser.

Input Text

SHA-1

—

SHA-256

—

SHA-384

—

SHA-512

—

Input Text

Hexadecimal

Binary

Octal

Generates a signed JWT using HMAC-SHA256. For demonstration — do not use this secret in production.

Header (JSON)

Payload (JSON)

Secret Key

Generated Token

How It Works & Why It Matters

Base64 and URL encoding aren't encryption — they're reversible, well-known transformations that make binary or special-character data safe to put in a URL, header or text field. Anyone can decode a Base64 string in seconds, which is why Base64-encoded data (like the payload of a JWT) is routinely readable, not confidential.

Hashing is different: it's one-way. This tool computes cryptographic digests — MD5, SHA-1, SHA-256 and others — so you can verify a file hasn't changed or compare values during debugging. MD5 and SHA-1 are collision-broken and should not be relied on for security purposes such as password storage or signatures; they're included here mainly for compatibility checks against legacy systems. Everything runs client-side via the Web Crypto API, so nothing you paste leaves your browser.

Need help securing data encoding and cryptography in your applications?

If you like this tool, Speak with OneFirewall