JWT Decoder & Token Inspector vs SupaLog

Decode any JSON Web Token in a second — paste it in and JWTPeek splits it into a colour-coded header, payload and signature, pretty-printed and ready to copy. It is the fast, private way to read and inspect a JWT without pasting it into a random website. Most online JWT decoders make you send a sensitive bearer token to a server. JWTPeek does everything locally with Apple's CryptoKit — your token is decoded and verified right on your iPhone and never touches a server, a log or the network. WHAT YOU GET - A clean three-part breakdown of any token: header, payload and signature, each Base64URL-decoded and pretty-printed - Every claim laid out and labelled — issuer, subject, audience and your own custom claims - exp, nbf and iat shown as real human dates, with a live expiry countdown so you know instantly if a token is still valid - One-tap HMAC signature verification with HS256, HS384 or HS512 — enter your secret (plain or Base64) and see match or mismatch - Clear alg:none warnings so you never trust an unsigned token by mistake - A saved history of recently decoded tokens, on this device, so you can reopen any of them in a single tap PERFECT FOR - Backend and API developers debugging authentication and login flows - Engineers building with OAuth 2.0 and OpenID Connect - QA and security testers inspecting bearer tokens and claims - Anyone who needs to quickly check when a token expires WHY NOT JUST USE A WEBSITE? Because pasting a real access token into a browser tab sends it over the internet to a third party. A JWT is a bearer credential — whoever holds it can use it. JWTPeek keeps every token on your device, so you can inspect production tokens without leaking them. PRIVACY 100% on-device. Every token is decoded and verified locally with CryptoKit. Nothing is ever uploaded, logged, or sent to any server. There are no accounts and no tracking. FULL ACCESS JWTPeek Premium unlocks the full toolkit: on-device HMAC signature verification (HS256, HS384, HS512) and the complete security reference. Choose the plan that fits you: - Weekly - Yearly (best value) - Lifetime — pay once, yours forever Subscriptions auto-renew until cancelled; Lifetime is a single one-time purchase. Paste your first token and see it decoded in seconds. Terms of Use (EULA): https://web-levi.web.app/terms Privacy Policy: https://web-levi.web.app/privacy-policy Questions? tphuc.work@gmail.com

Supabase, managed from your pocket. If you run a Supabase backend and hate being chained to a laptop to check on it, SupaLog is built for you. It is a calm, native client for the Supabase Management API that puts your projects, database, auth users, storage and logs one tap away. There is no middle server in the loop: your access token lives in the device Keychain, requests go straight to Supabase, and nothing about your infrastructure is logged or sold. It is made for indie hackers, backend engineers and small teams who want to watch a production project from the couch, the train or the coffee queue without opening a browser. Every feature described below is unlocked only with an auto-renewable subscription purchased inside the app. New subscribers get a free trial: 3 days on the weekly and monthly plans, one week on the yearly plan; you may cancel anytime during the trial to avoid being charged. Open SupaLog and every project you own is listed with its region, status and plan. Tap one and you land on a dashboard that reads like a control room: database tables and rows, a SQL runner for quick queries, the auth user list with sign-in providers, storage buckets with file sizes, and edge functions with their deploy state. Live logs stream in so you can catch an error the moment it happens, and usage panels show database size, auth users, API requests and your plan. Pull to refresh and the numbers update against the real API, not a cached guess. The database browser lets you preview table rows and run read or write SQL, with a confirmation before anything destructive, while the auth section lets you search users, inspect metadata and filter by sign-in provider. Storage shows every bucket and object with sizes and public or private state, the functions view shows status, version and source, and the secrets and API key screens stay locked behind Face ID. Smart notifications can warn you when a project nears its database size or user limit, when error rates climb, or when a project gets paused, so a problem reaches your phone before it reaches your customers. SupaLog fits the moments a laptop cannot. Triage an incident from bed when the error alert wakes you, run a quick count query while you wait for coffee, or check whether last night's deploy actually shipped. You can switch between several Supabase projects in a tap and copy a connection detail or a row value straight to the clipboard. For freelancers juggling client backends it becomes a single window into every project, and for a solo founder it is the difference between a calm evening and a frantic search for a computer. SupaLog ships in 39 languages with VoiceOver and Dynamic Type support, and keys, secrets and destructive actions are protected by on device biometrics. Your tokens never leave the Keychain, there is no analytics SDK, and no third party server ever sees your project data. It works as a monitoring dashboard, a quick database client, an on call companion and a billing watchdog, all without a single line of setup beyond pasting a token. Unlock with Pro: • Unlimited projects (free: 2) • Live log streaming and advanced usage analytics • SQL runner with query history and write mode • Usage and error alerts plus Home Screen and Lock Screen widgets • Cross-project user search and comparison Subscription Pricing & Terms Features require a subscription. Pricing and terms available in-app. Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Payment will be charged to your Apple ID account at confirmation of purchase. The subscription automatically renews unless auto-renew is turned off at least 24 hours before the end of the current period. Your account will be charged for renewal within 24 hours prior to the end of the current period. Manage or cancel your subscription and free-trial conversion in Settings > Apple ID after purchase. Any unused portion of the free-trial period will be forfeited when you purchase a subscription.