Tokens and security
How to decode a JWT safely, without a website
A JWT is three Base64URL parts: header, payload and signature. Here is how to decode one offline, read exp, iat and nbf, and why decoding is not verifying.
5 min read
Guides
Tokens and security
JWTs, hashes and the secrets developers paste every day, and how to keep them safe.
Tokens and security
MD5 vs SHA-256: which checksum to use
What a hash is, when MD5 is still fine, why SHA-256 is the default for checksums, and how to verify a download on a Mac.
5 min read
Get DailyUtil
Put the toolbox on your Mac
Free for eight tools, with no time limit and no account. Needs macOS 14 or later on Apple Silicon and Intel.