Generate RFC 7636 OAuth PKCE code_verifier + code_challenge (S256 method) pairs. Verifier uses 48 bytes → 64-char base64url, challenge uses SHA-256. Code never leaves your device — formatting and validation run locally in your browser.
Runs on Web Crypto
Content reviewed October 2026 · About Toolzum
Generate PKCE code_verifier and code_challenge (S256) pairs, or verify that a verifier matches a challenge. Test mobile and SPA auth flows safely — free, local, no signup.
Compute SHA-1, SHA-256, SHA-384, or SHA-512 hashes of text content using the Web Crypto API. Code never leaves your device — formatting and validation run locally in your browser.
Convert between hexadecimal bytes and ASCII text. Supports custom delimiters and real-time bidirectional conversion. Code never leaves your device — formatting and validation run locally in your browser.
Generate PGP key pairs with OpenPGP.js — public for sharing, private stays local. Encrypt mail like it's 1991 but working — local crypto, unlimited saves.
Generate invisible Unicode characters and blank text for bios, usernames, and formatting tricks. Post empty messages anywhere — free, local, copy-paste ready.
Proof Key for Code Exchange — secures OAuth on public clients that can't keep secrets.
43–128 URL-safe characters, cryptographically random every time.
S256 always — the plain challenge method is deprecated upstream.
No — generation runs locally in your browser; unlimited saves on local tools.
PKCE Verifier
Generate PKCE code_verifier and code_challenge (S256) pairs, or verify that a verifier matches a challenge. Test mobile and SPA auth flows safely — free, local, no signup.
OAuth Client Setup
Generate OAuth authorization URLs for Google, GitHub, Facebook, Microsoft, and LinkedIn with custom client ID, redirect URI, and scope.