🔐 encrypt.tools

Data Encoding & Radix Representation

The formats data travels in — Base64, hex, URL escapes, JWTs, and every radix in between.

BASE64 · RFC 4648

Base64

Encode and decode Base64, with URL-safe variant

BASE · 32/58/85

Base32 / 58 / 85

The other bases: RFC 4648, Bitcoin, and ASCII85

HEX · UTF-8

Hex ⇄ Text

Bytes as hex, hex as bytes

RADIX · 2–36

Base Converter

Arbitrary-precision conversion between bases 2–36

URL · RFC 3986

URL Encoder

Percent-encoding for URLs and query strings

HTML · ENTITIES

HTML Entities

Escape and unescape HTML special characters

JWT · HS256

JWT Debugger

Decode JSON Web Tokens and verify HMAC signatures

ROT · 13/47/N

ROT13 / ROT47

The self-inverse alphabet rotations

MORSE · CW AUDIO

Morse Code

Text to Morse and back, with playable audio

PUNYCODE · IDN

Punycode Converter

Convert internationalized domains to and from xn-- ASCII

FIELD NOTES

Choosing the right encoding & radix tool

Encodings change how data is represented, not who can read it. Base64 carries binary through text-only channels like JSON and email, hex displays bytes for humans, URL encoding escapes special characters in links, and Base32/Base58 power TOTP secrets and Bitcoin addresses. None of them use a key, so none of them provide secrecy — anything encoded can be decoded by anyone.

These tools are the everyday companions of cryptography: keys and hashes are shown in hex, certificates and JWTs are Base64, and CTF challenges often stack several encodings. The JWT debugger decodes tokens and verifies HMAC signatures locally, which makes it safe for production tokens — unlike hosted debuggers that receive the token you paste.

RELATED GUIDES
FUNDAMENTALS

Encoding vs Encryption vs Hashing: The Difference, With Examples

Encoding, encryption and hashing all turn data into gibberish, but only one keeps secrets. Learn the difference with real Base64, AES and SHA-256 examples and when to use each.

6 MIN READJWT · WEB SECURITY

How to Decode a JWT — and 7 Security Mistakes That Get Tokens Forged

What's inside a JSON Web Token, how to decode and verify one safely, and the real-world JWT vulnerabilities — alg:none, key confusion, weak secrets — with the fix for each.

6 MIN READ