PKCE Generator and Verifier
Generate an OAuth PKCE verifier and S256 challenge, or check an existing pair.
Generation and hashing run in your browser; inputs are not sent to an API.
Using PKCE Generator and Verifier for open banking
Generate an OAuth PKCE verifier and S256 challenge, or check an existing pair.
Sandbox example and expected result
Load the RFC 7636 example: its verifier produces challenge E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM.
Limitations and troubleshooting
Use a new unpredictable verifier for each authorization request. Never reuse the published example in a real flow. This checks S256 derivation, not an authorization server.
Where your input is processed
Generation and hashing run in your browser; inputs are not sent to an API. Use synthetic test data.
Maintained by OpenFinanceTools. Guidance updated 23 October 2026. Testing and editorial approach