Hodor vs JWT & Base64 Decoder/Verifier

Unlike the majority of system-based HTTP proxy capture software, Hodor is a packet capture tool based on the IP layer protocol. Consequently, Hodor is capable of capturing HTTP data traffic that many other capture software cannot, including the data traffic from Flutter apps. Hodor provides many useful features, including: - Packet capturing & rewriting with support for HTTP, TCP, UDP, and WebSocket data protocols. - Capturing and rewriting Flutter app traffic. - Support JavaScript extensions - HTTPS decryption to view decrypted data. - Mapping (i.e., replacing) data in HTTP requests and responses. - HTTP replaying and simulating requests and responses for server debugging without using the client again. - Formatting preview for Protobuf, Form-Data, JSON, HTML, JavaScript, and CSS. - Forwarding HTTP requests to other network tools within the local network for data processing (including traffic from Flutter apps). - Domain filtering to only view requests and responses from specific domains. - URL Scheme support for controlling the start and stop of packet capturing with commands. Hodor is an incredibly useful web debugging tool that can help you easily resolve various issues, making your work more efficient and enjoyable. Whether you are a developer or a tester, you can benefit from Hodor. Give it a try now! Automatic Subscription Service Rules 1. If you subscribe to the automatic renewal service through your Apple ID and do not actively cancel the automatic subscription service during the subscription period, Hodor will automatically deduct the next subscription fee from the balance of the Apple ID account linked to the automatic renewal service 24 hours before the current subscription period expires (subject to the actual Apple billing rules). You should pay attention to the balance and payment status of the account. If the renewal fails due to account issues or insufficient balance, you will bear the risk and/or loss by yourself. For your convenience, Apple will notify you of the upcoming deduction before processing the payment. It is important to note that based on the nature of the automatic renewal service, if you do not explicitly cancel the automatic renewal service during the subscription period, Apple will issue a deduction instruction to the relevant parties based on your permission. Generally, any fees deducted based on this instruction will not be refunded. 2. Hodor Pro Subscription Period: 1 year. 3. Hodor reserves the right to adjust service prices or stop providing automatic renewal services. If you do not agree with the adjusted service price, you can cancel the automatic renewal service according to these rules. If you do not cancel the automatic renewal service, the subsequent fees deducted by Apple will be adjusted to the new service fee. 4. The method to cancel the automatic subscription service is as follows: open the Apple iOS device "App Store" -> click on the Apple account profile picture in the upper-right corner -> enter "Account" -> click on "Subscriptions" -> select "Hodor" -> cancel the subscription. 5. Hodor may stop providing you with automatic renewal services according to operational needs. Your Hodor service period will end on the date of the expiry of the current service cycle. * Privacy Policy https://ximlu.github.io/hodor/privacy_en.html * Terms of Service https://ximlu.github.io/hodor/terms_en.html

JWT Decoder, Encoder & Verifier is the JSON Web Token companion your phone has been missing. Paste a token and instantly see its header, payload, and claims decoded - then verify its signature, sign your own, or convert Base64 back and forth. Everything runs on the device. No accounts, no network calls, nothing stored. 100% OFFLINE, NOTHING LEAVES YOUR DEVICE Tokens often carry sensitive data, so this app never uploads them. All parsing, verification, signing, and Base64 work happens locally. There is no server, no logging, and no analytics on the content you paste. It is the safe way to inspect a production token on your phone. DECODE - Live decoding as you type or paste - no "decode" button needed - Pretty-printed JSON for both the header and the payload - Time claims (iat, nbf, exp) shown as readable UTC, with EXPIRED and "not yet valid" badges - Raw Base64URL signature segment displayed separately - Clear, specific errors for malformed tokens VERIFY SIGNATURES - HMAC: HS256, HS384, HS512 with a shared secret (raw or Base64 key) - RSA: RS256, RS384, RS512 (RSASSA-PKCS1-v1.5) with a PEM public key - RSA-PSS: PS256, PS384, PS512 with a PEM public key - ECDSA: ES256, ES384, ES512 with a PEM public key - The input automatically switches between secret and PEM based on the token's algorithm, and the result clearly states valid, invalid, or why it could not be checked SIGN AND GENERATE - Build and HMAC-sign a JWT from any JSON payload (HS256/384/512) - One-tap "Generate key pair" creates a throwaway RSA or EC key for testing, fills the private key, and shows the public key to copy straight into the Verify tab - a complete sign-then-verify loop, entirely on device BASE64 TOOLBOX - Encode and decode standard Base64 and URL-safe Base64URL - Optional padding control - Falls back to a hex view when decoded bytes are not valid UTF-8 text BUILT FOR ENGINEERS - Paste straight from the system clipboard with one tap - Load a built-in example to see how each tool works - Copy any result to the clipboard - Monospace, selectable output throughout POLISHED TO MATCH YOUR PHONE - Native Material Design 3 interface - Light and dark themes that follow the system setting - Localized in English, Traditional Chinese, Simplified Chinese, and Japanese WHO IT IS FOR - Backend and mobile developers debugging auth tokens - Security engineers inspecting and verifying JWTs - QA and support teams checking expiry and claims - Anyone who needs to decode a token without pasting it into a website A note on standards: this tool reads and verifies tokens; it is an inspection and testing utility, not a secrets manager. Keys you paste or generate stay on the device and are never transmitted. JWT Decoder, Encoder & Verifier is fast, private, and made for real debugging. Install it once and stop pasting tokens into random web decoders.