Encoding & Security tools

Hash, sign, encrypt, decode. kodilo has 28 free Encoding & Security tools, including Base64 Encoder & Decoder, JWT Decoder, URL Encoder & Decoder and HTML Entities, and more. Every tool runs entirely in your browser, with no sign-up and no data sent to a server.

• Base64 Encoder & DecoderEncode and decode Base64 strings.
• JWT DecoderDecode and inspect JWT tokens.
• URL Encoder & DecoderEncode and decode URL strings.
• HTML EntitiesEncode and decode HTML entities.
• Hash TextGenerate MD5, SHA-1, SHA-256 and other hashes.
• HMAC GeneratorGenerate an HMAC signature for a message and key.
• BcryptHash and verify passwords with bcrypt.
• Basic Auth GeneratorGenerate an HTTP Basic Authentication header.
• Token GeneratorGenerate random tokens with a custom charset and length.
• RSA Key Pair GeneratorGenerate an RSA public/private key pair.
• Text EncryptionEncrypt and decrypt text with AES and a passphrase.
• BIP39 GeneratorGenerate a BIP39 mnemonic seed phrase.
• XOR CipherEncrypt or decrypt text/bytes with a repeating XOR key.
• Checksum CalculatorCompute a CRC32 or other checksum for text or a file.
• String EscaperEscape or unescape strings for JSON, JS, SQL, shell, regex, CSV and HTML.
• TOTP / 2FA GeneratorGenerate and check time-based one-time passwords with a QR code.
• JWT GeneratorSign JSON Web Tokens with HS256, RS256 or ES256 and verify them.
• CSP GeneratorBuild a Content-Security-Policy with warnings for risky values.
• Base32, Base58 & Hex EncoderEncode and decode UTF-8 text as Base32 (RFC 4648), Base58 (Bitcoin alphabet) or hex, and list each character's code point and bytes.
• CSR GeneratorCreate a certificate signing request and its private key for RSA or ECDSA, with subject fields and DNS alternative names.
• RBAC Matrix BuilderBuild a roles × resources × actions grid with scopes and inheritance, then export JSON, YAML, a Spatie seeder, CASL or SQL.
• Permission TesterCheck whether a role may perform an action on a record, with the deciding rule and the inheritance chain.
• Policy DiffCompare two role matrices: granted, revoked, widened and narrowed permissions per role, with risky escalations flagged.
• Password Strength CheckerEstimate entropy and crack time per attack scenario, spot weak patterns and get advice. Never stored.
• SAML DecoderDecode SAMLRequest and SAMLResponse messages: issuer, NameID, validity, audience, attributes and signature.
• OAuth & OIDC HelperBuild an OAuth 2.0 or OIDC authorization URL with PKCE, state and nonce, and decode callbacks and tokens.
• SSH Key GeneratorGenerate Ed25519 or RSA SSH key pairs in OpenSSH format with a comment and SHA256 fingerprint.
• Webhook Signature VerifierVerify GitHub, Stripe, Slack, Shopify and HMAC webhook signatures.