OAuth PKCE Generator

Build a PKCE verifier and SHA-256 code challenge in your browser.

Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.

OAuth PKCE Generator

How to use this tool

  1. Enter your values in the fields above.
  2. Press Generate to see the result.
  3. Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.

Worked example

Standard verifier dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk gives challenge E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM.

What this tool does not do / Limits

This tool only computes a verifier and challenge from text you enter. It does not connect to any authorization server, log you in, or store anything.

Frequently asked questions

Do I share the verifier?

No. Share only the challenge. The verifier stays with the app that started the flow.

What is S256?

The method where the challenge is the base64url SHA-256 hash of the verifier.

Related tools

JSON Studio

Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.

Live

Regex Tester

Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.

Live

Security Header and DNS Checker

Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).

Live