JWT Lens vs Headmin!

JWT Lens is a fast, private JSON Web Token decoder and verifier for developers — a Safari extension that works entirely on your device. Tap the toolbar icon, paste a token (or grab the text you've selected on the page), and instantly see: • Pretty-printed, color-coded Header and Payload • Human-readable timestamps — exp, iat and nbf shown in your local time with relative phrasing ("expires in 59 minutes") • An at-a-glance expiry badge: valid, expired, or not yet valid • Plain-English descriptions of standard claims (iss, sub, aud, and more) Need to check a signature? JWT Lens verifies HS256/384/512, RS256/384/512, PS256/384/512 and ES256/384/512 using a secret or PEM public key you provide — all computed locally with the system's WebCrypto, never sent anywhere. Privacy by design: • No network requests — ever • No analytics, no tracking, no accounts • Nothing is stored: tokens and keys live only in the popup while you use it Whether you're debugging OAuth / OIDC flows, inspecting a bearer token, or learning how JWTs work, JWT Lens keeps it quick, clear, and completely on-device. Universal app: works in Safari on macOS, iOS and iPadOS.

Headmin is a native admin console for Headscale, the open-source, self-hosted control server for Tailscale-based networks. Point it at your own server and manage your entire tailnet from your phone — no dashboard tab required. CONNECT TO YOUR OWN SERVER Enter your Headscale URL and API key once. Your credentials are validated and then stored securely on-device, in your phone's Keychain or Keystore — never on our servers, because we don't have any. Headmin talks directly to your Headscale instance. USERS List, create, rename and delete users in seconds. NODES See every device on your network at a glance: online status, IP addresses and tags. Rename a node, move it to a different user, expire its key, or remove it entirely. Generate pre-auth keys with custom expiry, reusable or single-use, tagged for your ACLs. ROUTES View every subnet route and exit node your devices advertise, and approve or disable them individually. ACL POLICIES Edit rules, groups, tag owners and hosts through a visual editor, or drop into a raw HuJSON view for full control. BUILT FOR SELF-HOSTERS Headmin has no backend of its own and no account system — it's a thin, secure client for the server you already run. Your data stays between your phone and your infrastructure. Requires an existing Headscale server and an API key (generate one with `headscale apikeys create`).