String Format Identifier

The tool recognizes Base64, Base64URL, Base32, hex, binary text, JSON, XML, JWT, JWE, PEM, OpenPGP, UUIDs, ULIDs, data URIs and common password-hash formats. It also checks decoded bytes for OpenSSL's Salted__ header and common file headers, such as PNG and PDF.

Recognized format means the tool found identifying fields, such as a PEM label or a readable JWT header. Suggested format means the characters and length fit. Several formats use the same letters and numbers, so check where the value came from to narrow it down. Expand Other possible formats to compare the alternatives.

Identifying the format is the first step. Use a decoder to read the contents, JWT Verify to check a token's signature, or a certificate inspector to read a PEM certificate. A file header identifies its type; open the complete file with an appropriate viewer to check whether it can be read. For files from an unfamiliar source, use your usual malware checks as well.

1. Identify one value and look at the suggested format.
2. If several formats fit, check the name of the field or the app that produced the value.
3. Open a suggested tool, then paste the value there. The link opens the tool without carrying your input.

• OpenSSL AES Decrypt Checker Inspect a Salted__ envelope, match its recipe, and test decryption.→
• Base64 Decode Read decoded text, inspect bytes and identify common file headers.→
• Hash Identifier Identify password-hash formats and compare common hash lengths.→
• JWT Decode Read a JWT's header and claims.→
• SAML Decoder Read the XML in a SAMLRequest or SAMLResponse. Check signatures in your identity provider or service provider.→
• Key Inspector Read the type and algorithm of a PEM or DER key.→
• Hex to ASCII Read hexadecimal bytes as ASCII text.→