Base64
Encode UTF-8 text or hexadecimal bytes as Base64, create unpadded URL-safe Base64 (Base64URL), or decode Base64 as UTF-8 text or hexadecimal bytes locally.
Open Base64Developer tool category
Use this collection to inspect how text is represented, escaped for markup, encoded, tokenized, or hashed. Keep the distinction between transformation and verification clear: these utilities expose text, bytes, claims, encodings, and digests, but they do not turn decoded data or a hash into a security guarantee.
Common workflow
4 recommended starting points
Encode UTF-8 text or hexadecimal bytes as Base64, create unpadded URL-safe Base64 (Base64URL), or decode Base64 as UTF-8 text or hexadecimal bytes locally.
Open Base64Decode JWT headers and payloads locally and inspect exp, nbf, and iat time status.
Open JWTEncode or decode a URL path, query parameter value, or fragment component, handle form-style plus-sign spaces, remove common tracking parameters, clean and sort full URLs in one pass, normalize comparable URLs, or parse a full URL.
Open URL ComponentGenerate common digests from UTF-8 text or decoded Hex and Base64 bytes with browser-local processing.
Open HashRepresentative utilities
3 additional tools
Encode UTF-8 text as hexadecimal bytes or decode hexadecimal bytes back to UTF-8 text.
Convert whole numbers between decimal, hexadecimal, binary, and octal without losing large integer precision.
Encode HTML-sensitive characters or decode common named and numeric character references locally.
Calculate
1 resources
Calculate exact padded Base64 length with 4 × ceil(bytes / 3), including padding characters and encoding overhead, locally in your browser.
Understand the concepts
3 resources
Understand the Base64URL alphabet, padding rules, JWT usage, UTF-8 decoding, and how to convert safely between standard Base64 and URL-safe Base64.
Learn why hashes depend on exact bytes, how UTF-8 encodes text, and why BOMs, Unicode normalization, line endings, hex, and Base64 cause hash mismatches.
Learn the difference between decoding and verifying a JWT, what signature verification proves, and why issuer, audience, and time claims still need validation.