Running on your device · 0 bytes uploaded

# PKCE verifier and challenge

Generate an RFC 7636 code_verifier / code_challenge pair, or check a pair against each other — plain and S256, CSPRNG values made in your tab.
S256 (SHA-256 — use this)plain (no hash — only if the server cannot do S256)Verifier length436486128

RFC 7636 §4.1: 43 characters is the 256-bit minimum.
Generate paircode_verifiercode_challengeCheck pairNothing in yet

Paste, drop, or type to begin. Everything stays on this device.

generate a pair or paste one to check

## Next door in Web

- [JWT decoder](/web/jwt)
- [Authorization header](/web/auth-header)
[All web tools](/web)

---

Canonical HTML: https://nutter.tools/web/pkce
Markdown version: https://nutter.tools/web/pkce/index.md
Plain-text version: https://nutter.tools/web/pkce/index.txt
Agent index: https://nutter.tools/llms.txt