g3n-data
Support繁中
← All tools

OAuth PKCE Generator

Generate unbiased Web Crypto verifiers and S256 challenges, or derive a challenge from your own verifier.

oauth-pkce-generatorLOCAL WORKSPACE

Enabling local controls…

Local memory only: no upload, storage, host connection or credential operation. The report describes limited structural checks and risk hints.

Use S256 and one fresh verifier per authorization flow. Custom verifiers need 43–128 unreserved ASCII characters; their entropy is unverified. plain is retained for compatibility and exposes the verifier in the authorization request. No OAuth request, storage or clipboard action occurs until explicitly requested.

Source reviewed 2026-10-19: ToolHub source · RFC 7636 PKCE

Edit input and inspect. Changes clear old results and cancel pending work.

How to use this tool

Edit the bounded input, inspect locally, then explicitly copy or download the complete report. Changes cancel and clear old results.

When not to use it

Use S256 and one fresh verifier per authorization flow. Custom verifiers need 43–128 unreserved ASCII characters; their entropy is unverified. plain is retained for compatibility and exposes the verifier in the authorization request. No OAuth request, storage or clipboard action occurs until explicitly requested.