Does CyberChef upload my data?

No, and neither does Toolbit. Both are client-side, which is why both are safe for sensitive input.

Can Toolbit chain operations like a CyberChef recipe?

Toolbit supports piping output from one tool into a compatible next tool, which covers common two- and three-step chains. It does not aim to replicate CyberChef's arbitrary-length recipes.

Which is better for JWTs and JSON?

Toolbit — the JWT decoder and JSON tools are purpose-built screens rather than generic operations.

Toolbit vs CyberChef

CyberChef is GCHQ's "cyber swiss army knife" — a browser-based tool for chaining data operations into recipes. Toolbit targets a different day: the small formatting, decoding, and generation tasks that interrupt ordinary development work. Both run entirely client-side.

Open Toolbit See all 42 tools

The recipe model versus the workspace model

CyberChef's strength is its recipe pipeline: stack dozens of operations, feed data through, and save the recipe for later. It is unmatched for forensics, malware analysis, and multi-stage decoding. Toolbit instead gives each task a focused screen with sensible defaults, plus tabs and a pipe for the two- or three-step chains that come up in practice.

Tool coverage

CyberChef has far more esoteric operations — historic ciphers, compression formats, binary analysis, data carving. Toolbit is broader on everyday development: an API request builder, a WebSocket tester, a Docker command builder, SQL and GraphQL formatters, PDF tools, and an image converter, none of which are CyberChef's remit.

Learning curve

CyberChef expects you to know which operation you want and how to order it. Toolbit gives each tool its own URL and page, so "format this JSON" is one click rather than a recipe to assemble. If you are handing a link to a colleague who is not a security analyst, that difference matters.

Which should you use?

For forensic work, deep binary analysis, or long multi-stage decoding pipelines, use CyberChef. For everyday formatting, decoding, generation, and API poking, Toolbit is faster to reach for. Many people keep both bookmarked.

Frequently asked questions

Does CyberChef upload my data?: No, and neither does Toolbit. Both are client-side, which is why both are safe for sensitive input.
Can Toolbit chain operations like a CyberChef recipe?: Toolbit supports piping output from one tool into a compatible next tool, which covers common two- and three-step chains. It does not aim to replicate CyberChef's arbitrary-length recipes.
Which is better for JWTs and JSON?: Toolbit — the JWT decoder and JSON tools are purpose-built screens rather than generic operations.