Running on your device · 0 bytes uploaded

PKCE verifier and challenge

Generate an RFC 7636 codeverifier / codechallenge pair, or check a pair against each other — plain and S256, CSPRNG values made in your tab.
S256 (SHA-256 — use this)plain (no hash — only if the server cannot do S256)Verifier length436486128

RFC 7636 §4.1: 43 characters is the 256-bit minimum.
Generate paircodeverifiercodechallengeCheck pairNothing in yet

Paste, drop, or type to begin. Everything stays on this device.

generate a pair or paste one to check

Next door in Web

- JWT decoder (/web/jwt)
- Authorization header (/web/auth-header)
All web tools (/web)

Canonical HTML: https://nutter.tools/web/pkce
Markdown version: https://nutter.tools/web/pkce/index.md
Plain-text version: https://nutter.tools/web/pkce/index.txt
Agent index: https://nutter.tools/llms.txt