Pasting live tokens into random websites is risky. DevTidy decodes locally and sends nothing anywhere.
Frequently asked questions
Is my data uploaded?
No. DevTidy runs entirely in your browser. Your input is processed on your device in a background Web Worker and never sent to a server, so it is safe for API keys, customer data and production configs.
Does it verify the signature?
No. Verifying needs the secret or public key. DevTidy only decodes, which is what you need for debugging claims.