Free Developer Tools
A collection of fast, client-side developer utilities. Everything runs in your browser — no data is ever uploaded.
Password Generator
UUID Generator
Base64 Encoder
Base64 Decoder
Random String Generator
Hex Generator
JSON Formatter
JWK Generator
Also check out our JWT tools
Related tools
Recent articles
Guides on JWT secrets, signing algorithms, and token security.
The JWT Security Checklist (2026)
Every check that matters before you ship JWT authentication: key strength, algorithm pinning, token lifetime, storage, revocation, and rotation.
2026-10-23 · 7 min
How to Store JWTs: localStorage vs httpOnly Cookies
The most-asked JWT question, answered: where tokens should live in the browser, what XSS and CSRF each option really means, and the hybrid pattern most teams ship.
2026-10-16 · 9 min
JWT Auth in Node.js/Express: Step by Step
A complete, practical walkthrough of adding JWT-based authentication to an Express API, from login to protected routes to refresh tokens.
2026-08-05 · 12 min
401 vs 403 in Token-Based Auth
401 means authenticate, 403 means you're authenticated but not allowed. Getting this distinction right in JWT-based APIs makes debugging far easier.
2026-07-10 · 6 min
JWT Key Rotation with kid and JWKS
Rotating signing keys without breaking active sessions requires the kid header and a JWKS endpoint. Here's how the mechanism works end to end.
2026-06-22 · 9 min
Algorithm Confusion Attacks Explained
One of the most damaging JWT vulnerability classes comes from trusting the alg header. Here's exactly how algorithm confusion attacks work and how to stop them.
2026-06-08 · 8 min