URL unpacker
Paste a URL to see its scheme, host, path, query parameters and fragment, each decoded. Encode or decode a URL component, or HTML entities. A parameter that holds a JSON Web Token or Base64 is marked, with a link to the tool that reads it.
Everything runs in your browser. Nothing you paste is sent anywhere or saved: this page is served with a Content Security Policy that stops it from opening connections (connect-src 'none'), and it has no analytics or ads. Open your browser's Network tab to check that no request carries what you paste.
How to use
Paste a URL and read the Parts view, or pick another view to convert the text. OAuth and sign-in callbacks carry codes and tokens in their parameters, sometimes after the #, so the page reads parameters there too and marks the names that usually carry a credential. Use as input moves a result back into the box, for text that was encoded twice.