OAuth PKCE S256 Workbench
Generate a random PKCE verifier/challenge or check a supplied S256 pair locally.
Loading tool…
How to use OAuth PKCE S256 Workbench
Generate a random PKCE verifier/challenge or check a supplied S256 pair locally. A generated verifier uses cryptographic random bytes and unpadded Base64url. Its S256 challenge is the Base64url SHA256 digest of the verifier’s ASCII spelling; Check recomputes that relationship.
- Provide verifier (check), s256 challenge (check), random bytes (generate).
- Choose the supported mode and run the tool. Review its assumptions and any reported errors.
- Copy the result or download a separate output; reset to clear the current form.
Good to know
- Verifier43–128 unreserved ASCII characters; generated randomness32–96 bytes. S256 only; no plain method.
- This creates test/client artifacts only. It does not start an OAuth login, register a client, send a token request or store a verifier for your application.
- Inputs are processed on this device and are not automatically saved or uploaded.
Common questions
Should I reuse a generated verifier?
A real OAuth client creates a new unpredictable verifier for each authorization request and retains it securely until exchange. This page only generates or checks the mathematical pair.
Does this change my original input?
No. The tool returns a separate result. Review that output before using it in another application.
Keep going with related tools
All developer →Base64 Encoder
Encode Unicode text as standard Base64 using UTF-8, entirely in your browser.
DeveloperSHA Hash Generator
Calculate SHA-256, SHA-384, or SHA-512 digests of exact UTF-8 text using Web Crypto.
DeveloperURL Parser
Inspect HTTP(S) URL components, normalized hostnames, and repeated query parameters without visiting a link.
DeveloperOIDC Metadata and JWKS Consistency Checker
Compare supplied discovery metadata and public JWKS without contacting an identity provider.