ToolbitThe Toolbit blog
Notes on the things that surround everyday development work: handling secrets safely, the formats we all half-remember, and why running tools locally changes what you can safely paste into them.
Latest posts
- Pasting a JWT into an online decoder is a security incident Most online JWT decoders, JSON formatters and Base64 tools post your input to a server. Here is what that means for a real access token, and how to check. · 5 min read
- Cron expressions explained, field by field A practical guide to reading and writing cron expressions: all five fields, ranges, steps and lists, the day-of-week trap, and how to verify a schedule before you deploy it. · 6 min read
- Base64 is not encryption Base64 is an encoding, not a cipher. What it actually solves, why it appears in JWTs, data URIs and email, and what to reach for when you need real confidentiality. · 4 min read