JWT Decoder & Token Inspector vs HTTPS Capture Traffic Decrypt

Decode any JSON Web Token in a second — paste it in and JWTPeek splits it into a colour-coded header, payload and signature, pretty-printed and ready to copy. It is the fast, private way to read and inspect a JWT without pasting it into a random website. Most online JWT decoders make you send a sensitive bearer token to a server. JWTPeek does everything locally with Apple's CryptoKit — your token is decoded and verified right on your iPhone and never touches a server, a log or the network. WHAT YOU GET - A clean three-part breakdown of any token: header, payload and signature, each Base64URL-decoded and pretty-printed - Every claim laid out and labelled — issuer, subject, audience and your own custom claims - exp, nbf and iat shown as real human dates, with a live expiry countdown so you know instantly if a token is still valid - One-tap HMAC signature verification with HS256, HS384 or HS512 — enter your secret (plain or Base64) and see match or mismatch - Clear alg:none warnings so you never trust an unsigned token by mistake - A saved history of recently decoded tokens, on this device, so you can reopen any of them in a single tap PERFECT FOR - Backend and API developers debugging authentication and login flows - Engineers building with OAuth 2.0 and OpenID Connect - QA and security testers inspecting bearer tokens and claims - Anyone who needs to quickly check when a token expires WHY NOT JUST USE A WEBSITE? Because pasting a real access token into a browser tab sends it over the internet to a third party. A JWT is a bearer credential — whoever holds it can use it. JWTPeek keeps every token on your device, so you can inspect production tokens without leaking them. PRIVACY 100% on-device. Every token is decoded and verified locally with CryptoKit. Nothing is ever uploaded, logged, or sent to any server. There are no accounts and no tracking. FULL ACCESS JWTPeek Premium unlocks the full toolkit: on-device HMAC signature verification (HS256, HS384, HS512) and the complete security reference. Choose the plan that fits you: - Weekly - Yearly (best value) - Lifetime — pay once, yours forever Subscriptions auto-renew until cancelled; Lifetime is a single one-time purchase. Paste your first token and see it decoded in seconds. Terms of Use (EULA): https://web-levi.web.app/terms Privacy Policy: https://web-levi.web.app/privacy-policy Questions? tphuc.work@gmail.com

HTTPS Capture is a professional iOS packet-sniffer built for developers and network enthusiasts. No computer, no jailbreak — a single iPhone captures and decrypts all HTTP/HTTPS traffic on the device, down to every request header, response body, timing detail, and WebSocket frame. Whether it's API debugging, protocol reverse engineering, performance analysis, or everyday Mock and rewriting, HTTPS Capture packs a complete debugging toolkit once reserved for the desktop right into your pocket. All traffic is parsed and stored locally on-device. Nothing is ever uploaded to any server — your network data belongs to you alone. One-Tap Capture, Total Visibility • VPN tunnel + local MITM proxy — flip the switch and capture device-wide traffic instantly. No proxy configuration needed. • Real-time dashboard: request count, domain count, upload/download traffic at a glance. • Capture sessions are auto-archived — review, compare, and reuse history anytime. • LAN capture: turn it on, and any computer or tablet on the same Wi-Fi can point its proxy at your iPhone. Copy the proxy address in one tap. HTTPS Decryption, Plain to Read • Built-in CA certificate generation with a one-tap trust flow — decrypt encrypted traffic into plaintext effortlessly. • Optional capture of Apple system domains, enabled on demand. 7 Live Traffic Rules, Instant Effect Rules bind to the active Profile and apply to subsequent traffic immediately — no restart required: • URL Rewrite: freely rewrite request/response Header and Body, with intercept and redirect support. • Script Injection: rewrite matched traffic with JavaScript to handle complex scenarios with ease. • URL Filter: whitelist/blacklist to capture only what matters — say goodbye to noise. • Hosts Mapping: point domains at custom addresses, bypassing DNS for effortless environment switching. • Request Mapping (Mock): return local responses for specific URLs — the frontend never waits on the backend again. • Breakpoint Debugging: pause on match, then allow, drop, or tamper before forwarding. • AES Decryption: auto-decrypt encrypted request/response Body — plaintext appears instantly. Request Details, Pro-Grade Presentation • Five views: Request / Response / WebSocket Frames / Overview / Timing. • Smart Body preview: JSON highlighting, Hex Dump, image zoom, QuickLook — format auto-detected. • Inspect WebSocket frames one by one, with Protobuf message decoding. • Export standard HAR files in one tap — seamless handoff to Charles, Postman, and more. • Request headers, response headers, Cookie, TCP connections, and timing waterfalls, all at a glance. API Workbench, Send Requests Anywhere • Built-in request library — save common APIs and call them up anytime. • One-tap cURL import to reconstruct requests in seconds. • Sort and search by recent, name, or method for efficient management. 21 Dev Tools, Ready Out of the Box • Encoding & Hash: Base64, URL encode/decode, HTML entities, Unicode escape, MD5 / SHA-1 / SHA-256 / SHA-512. • Data Formatting: JSON prettify & minify, XML formatter, SQL formatter, JSON → Swift Codable models, Property List conversion. • Time & Numbers: timestamp conversion, timezone conversion, date diff, base conversion, UUID generator. • Text & Web: JWT decoder, URL parser, Query String parser & builder, HTTP status code lookup, regex tester, QR code generator. Deeply Integrated with iOS • Dynamic Island + Lock Screen Live Activity: capture timer, request count, and traffic scrolling in real time. • Control Center toggle (iOS 18+): start and stop capture in one tap without opening the app. • Multiple Profiles: freely switch between dev, test, and production rule sets. Privacy First • No request data is ever uploaded to a server. No personal information is collected. Privacy Policy: https://www.makerneo.com/en/doc/https-capture-privacy.html Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/